Permissions define what is allowed; ownership defines who is accountable. In forensics, ownership is chain of custody
Objective
Learner can inspect and change file ownership (chown, chgrp) for evidence handling and forensic auditability
Mission
A malware sample ~/sample-quarantine.bin was pulled off app-srv-03 by a collector account. Before logging it into the evidence tracker, re-own the file to user student and group soc-team
Commands you may need to solve this lab
ls -lchownchgrp
Questions
Machine Offline
Isolated container is offline
Click "Start Machine" to boot your sandbox instance and choose your preferred interface