Investigation commands
journalctl -p err -n 80 journalctl --since "1 hour ago" -u nginx --no-pager | grep -i deny ss -tulpen | grep ':443'
Operational triage
Log triage
Classify pasted logs into actionable risk buckets and generate local investigation commands.
Finding capture
Total in this lab: 0