Files carry more than content — ownership, size, and timestamps can reveal tampering, including a technique attackers use called timestomping
Objective
Learner can inspect full file metadata, identify owner and modification time, and understand forensic timestamps
Mission
A configuration file ~/documents/sshd_config.bak looks untouched at a glance, but Sarah suspects its timestamp was manipulated. Inspect its full metadata and report the owner along with the exact modification timestamp (format: owner YYYY-MM-DD HH:MM:SS)
Commands you may need to solve this lab
ls -lstat
Questions
Machine Offline
Isolated container is offline
Click "Start Machine" to boot your sandbox instance and choose your preferred interface