Homelab Hero · No. 012: your result

Hero call. 100 Hero Points.

Exactly right. A successful login from another country at 3 AM is a compromise until the evidence says otherwise. Off the network, nothing the intruder left behind can phone home or be reached; with the logs preserved, the new-account and persistence checks happen on your schedule, not theirs — and a media server is exactly the box a lab can afford to have dark for one night.

The lesson: Isolate first, preserve the logs, and prove it clean before it rejoins the network.

Share your result:
Homelab Hero No. 012 — I got it right on the foreign-login call (100/100). Think you would call it better? Play it: https://homelabherald.com/hero/012?s=100

Share it: Post to X WhatsApp Text Reddit Facebook LinkedIn Email

Tomorrow’s incident drops with the next issue at 7:00 AM PT.

Play it again · Read Issue No. 012