Skip to terminal input

CFS287 Network Forensics

Week 13: Multi-Source Log Correlation Lab

Exercises: 0/18 Checkpoints: 0/3

Create Submission Report

Full Name

Scenario: A SIEM alert has flagged outbound traffic to a known malicious domain. Work through each log source and connect the events into a single incident narrative.

analyst@forensics-lab: ~/evidence

analyst@forensics-lab:~/evidence$