Skip to main content

We use cookies to ensure you get the best user experience. For more information see our cookie policy.

Room Icon

Benign

Premium room

Challenge room to investigate a compromised host.

medium

150 min

42,056

User profile photo.
User profile photo.

To access material, start machines and answer questions login.

We will investigate host-centric logs in this challenge room to find suspicious process execution. To learn more about and how to investigate the logs, look at the rooms splunk101 and splunk201.

Lab Access

Start the attached lab machine by clicking the Start Lab Machine below. The machine may take up to 3-5 minutes to start. After the machine starts, the Splunk Instance can be accessed directly from your web browser. The required logs are ingested in the index win_eventlogs.

Set up your virtual environment

To successfully complete this room, you'll need to set up your virtual environment. This involves starting the Lab Machine, ensuring you're equipped with the necessary tools and access to tackle the challenges ahead.
Lab machine
Status:Off
Answer the questions below
Connect with the lab.