Log Hunt: Find the Attack in the Log
How it works
Each case is a short log, connection list or email header. Step 1: tap every line that is part of the attack. Step 2: say what the attack is. You get a point for the lines (half a point if you found some without crying wolf) and a point for the name. Then you see which lines mattered, why, and the StashGrid lab that teaches it. Everything here is made up: the addresses come from the ranges reserved for documentation and the domains end in .test or example.com.
I hid the bad lines in plain sight. Real attackers are less polite: they hide them in 40,000 lines and a time zone you forgot to convert. — Nyx
Play
Keep studying
- Free practice labs — every lab linked from the cases
- CySA+ roadmap
- Security+ practice test
- Port Match — ports and secure swaps
- Put It In Order — sequences the exams love
- Flashcards — acronyms with spaced repetition
- Mnemonic Lab — memory phrases for every ordered list
- Binary & Hex — speed drills and subnet masks
Your best scores are saved only in this browser on this device (no account, no cookies, no tracking). Clear your browser storage to reset them. Written by StashGrid with AI help and checked against the sources listed for each fact. StashGrid isn’t affiliated with CompTIA or NIST. Spotted an error? Tell us and we’ll fix it.