defensive-security · beginner

System Logs & Troubleshooting

Practice an evidence-driven troubleshooting workflow against fictional services and logs.

beginner50 mins10 tasks100 XP

Start Lab

What you will learn

Section 1 · 10 tasks

Evidence-Driven Troubleshooting

Follow observation → hypothesis → evidence → action → verification without changing a real system.

Learning objectives

Troubleshooting Mindset
Identify the Failed Service
Read Service Errors
Check Service State
Configuration Errors
Permission Problems
Disk Space Problems
Dependency Failures
Correlating Multiple Logs
Final Troubleshooting Investigation

Skills

troubleshootingservicedaemonsystemdsystemctljournalctlconfigurationdependencyfilesystemdisk-usagepermissionownershiproot-userexit-codeservice-stateincidentevidencehypothesisremediationverification

Prerequisites

Linux Event Logs

Recommended next rooms

Linux Event Logs
Investigate fictional Linux authentication and system events while separating observations from conclusions.
SSH Brute-Force Detection
Detect and document repeated fictional SSH authentication failures without attempting access.
SOC Alert Triage
Validate, contextualize, prioritize, document, and disposition fictional security alerts.