Linux DFIRIntermediateUnlock via course or plan

Log & Auth Forensics

Hunt authentication and sudo activity in synthetic Linux auth logs.

This room unlocks when you enrol in a linked course or have a matching Learn plan. No separate lab checkout — practice stays inside the track.