Attackers rarely leave one clean file behind. You will usually get a messy directory full of similarly-named files and need to isolate exactly the ones that matter
Objective
Learner can use wildcard patterns (*, ?, [...]) to select groups of files by name pattern
Mission
A compromised file server's downloads folder was mirrored into ~/downloads/. It contains legitimate backups and suspected exfiltration staging files named staged-2026-08-*.bin. Marcus needs all files matching that exact naming pattern copied into ~/cases/case-1042/evidence/ — nothing else
Commands you may need to solve this lab
lscp*?
Questions
Machine Offline
Isolated container is offline
Click "Start Machine" to boot your sandbox instance and choose your preferred interface