Run journalctl -u ssh | grep denied.
journalctl -u ssh | grep denied
Mission 100
Final incident review
Pull together logs, firewall state, and a final review note.
Security administrationjournalctlgrepufwecho
Lesson 100 of 360
0/360 lessons
0/17 missions
Security administration · 10 minutes
New learnerrank
0XP
0%complete
learner@clairos:/home/learner $
Unix ops lab: type a command, press Enter
Instructions
10 minutes
Click any instruction for the command details, the why, and the common mistake to avoid.
Run ufw status.
ufw status
Run echo final-review > final-incident-review.txt.
echo final-review > final-incident-review.txt
Save progress
Keep learning across sessions.
Create a free account to sync completed lessons, XP, streaks, course status, and your next lesson across sessions.
Checking account status...
Progress sync is idle.
0XP
New learnerrank
0day streak
0best streak
0daily streak
0lessons
0courses
0missions
0tasks
Noverified
Progress sync stores completion IDs, scores, streaks, badges, and game settings. Terminal contents, editor snippets, lab scratch, email, and real names are never published on leaderboards or share cards.
Lesson support
What to notice while you play.
Complete a small end-to-end security review.
Filter SSH denied events, inspect firewall, then write a note.
Security administration is a repeatable evidence workflow.
- Skipping the final note.
- Writing a note without checking current firewall state.
Reference
Commands in this lesson.
echo <text>
Print text or write lab notes with >.
grep [-i] <text> <file>
Find literal text inside a file.
journalctl -u <service>
Read simulated service journal entries.
ufw status
Inspect simulated firewall rules.