DevOps PeachChallenge · Medium
Uninvited Guest
Someone brute-forced their way in last night and left themselves several ways back. Read the logs, then evict them for good.
Practises the module Hardening a Linux server.
The ticket
SECURITY ALERT: unusual root activity on lab-01
The monitoring agent saw a burst of failed logins around 02:10, then a successful one, then a process nobody recognises calling out every few minutes.