Linux DFIRIntermediateUnlock via course or plan
Log & Auth Forensics
Hunt authentication and sudo activity in synthetic Linux auth logs.
This room unlocks when you enrol in a linked course or have a matching Learn plan. No separate lab checkout — practice stays inside the track.
Included with these courses