Startup Persistence Detection

Spot suspicious systemd units and shell profile hooks on a synthetic lab host image — preserve evidence before removal.

This room unlocks when you enrol in a linked course or have a matching Learn plan. No separate lab checkout — practice stays inside the track.