Rootkit Indicator Triage

Recognize rootkit-like indicators on a synthetic lab VM and choose evidence-safe response — not kit deployment.

This room unlocks when you enrol in a linked course or have a matching Learn plan. No separate lab checkout — practice stays inside the track.