back to labs
Quarantine the Malware Sample
MediumDigital Forensics & Incident Response15-20 minThe brief
A malicious script was dropped at /root/incoming/update.sh — executable and ready to run. Don't delete it (the IR team needs the sample); QUARANTINE it: move it into /root/quarantine/ and strip its execute permission so it can't be run by accident.
Grading checks the sample is no longer at the drop path, sits in quarantine unaltered (the original file, not a stand-in), and is NOT executable.
What you'll do
- Move /root/incoming/update.sh into /root/quarantine/
- Strip its execute bit so it can't run; don't delete it
Hands-on lab: you work on a real Linux box in your browser, graded on the machine's actual state.