Cybersecurity · hands-on lab
CEH Lab 08: Logs, Evidence and Covering Tracks
Understand what an intrusion leaves behind and why tamper-evident logging matters for both sides.
- 35 minutesTime in the lab
- intermediateLevel
- 3 tasksChecked automatically
- CertificateVerifiable link when you finish
The situation
Phase — Covering tracks (awareness). Attackers try to erase their traces; defenders make that hard. On your range you will see what activity records look like, and why forwarding logs off the host defeats tampering. No destructive action — this is about evidence integrity.
What you will do
- Review recent authentication events
- Why forward logs to a central server?question
- Write the lesson
How it works
The lab opens in your browser: a real terminal or desktop, nothing to install. Work through the tasks, press Check after each one and the portal verifies your work. Stuck? Ask for a hint. Finish every task and you get a certificate page with its own verification link for LinkedIn or your CV.