Task 1
Map change to cron activity
Deliverable
Compare the cron definition with the change record.
Hands-on cybersecurity learning
Work through realistic synthetic investigations, follow guided tasks and get feedback on your findings.
Private beta access is limited. Join private beta; use synthetic, non-sensitive information only.
Product tour
Generate a lab, open it, and start investigating evidence.
Dashboard
Recent lab
Generate Labs
Progress
Preparing labBuilding evidenceReady Linux Cron ReviewSaved Investigation
Task 1
Deliverable
Compare the cron definition with the change record.
Evidence preview
assets/scheduled/cron.d/platform-sync*/15 * * * * svc-report platform-sync.shHint
Check the cron definition before naming the account.
Follow the trace
Use the listed evidence, explain what happened, state what the evidence does not prove, then review the result.
Synthetic evidence packet
Each task lists the learner-visible files needed for that answer.
assets/logs/auth.logidentity signal
Task 1
assets/scheduled/cron.d/platform-syncscheduled definition
Task 2
assets/docs/change_request.mdapproval scope
Task 3
assets/runtime/process_execution_history.txthistorical execution
Task 4
Example task: cite the scheduled definition before naming the command or run-as account.
Learning progression
Every level uses the same habit with increasing evidence volume, correlation work and confidence limits.
Small evidence set with direct file references.
One clear output per task, written in plain language.
Name what the evidence proves and one thing it cannot prove.
More files across identity, timing, policy and activity records.
Correlate related evidence and explain gaps without checklist prose.
Separate observed facts from supported inference before recommending action.
Broader case material with richer state, history and approval boundaries.
Build a concise finding across multiple evidence types and competing explanations.
State scope limits, approval gaps and unsupported conclusions clearly.
Guidance and grading
Ask for guidance when you need it, then get feedback based on the evidence supplied for each task.
Support for the next investigation step.
Feedback based on the evidence supplied for the task.
Base each finding on the supplied case materials.
We are adding more learning areas and recording each customer-facing improvement during private beta.
View the Development Log