NorthLedger has identified unusual activity on one of its Linux jump servers, nl-jump01.
The server is exposed to regular SSH traffic, making it difficult to separate routine noise from genuine malicious activity. You have been provided with authentication, system, audit and shell history logs.
Your task is to identify the point of compromise and reconstruct what happened.
| Lab Released | 2026-07-23 18:00:00 |
Cookie Preferences
We respect your right to privacy. You can choose not to allow some types of cookies. Your cookie preferences will apply across our website.
These are required cookies for the site to function.
These cookies help us improve the site by tracking which pages are most popular and how visitors move around the site.
These cookies are used to improve your advertisement experience across our website, we have disabled these by default
