ZONEOFWAR
MISSION 006Blue Teampractitioner

Companion Computer Incident

Investigate suspicious behavior on the onboard Linux companion computer.

40 minindividual modevirtual

Most modern UAS pair a flight controller with a companion computer running embedded Linux — and that companion computer is exactly the kind of general-purpose system attackers know how to target. In this mission, process and network activity on a simulated companion computer doesn’t match its expected baseline.

You work through logs, running processes and network connections to determine what changed, when, and whether the flight controller itself is at risk. Resource constraints on embedded hardware mean your investigation has to be efficient, not exhaustive.

Companion Computer Incident is a core mission in the UAS Blue Team Defender learning path.

Learning outcomes

  • Investigate an embedded Linux system for signs of compromise
  • Differentiate normal companion-computer behavior from anomalous processes
  • Preserve evidence on resource-constrained hardware

Prerequisites

  • Drone Cybersecurity Foundations

Domains

Embedded

All missions run in isolated, simulated environments for authorized training and research.Read our Responsible Use policy →

Related Missions

Continue building this skill set.

MISSION 011

Supply Chain Surprise

Red Teamadvanced45 min

Trace unexpected software behavior to a component or configuration change.

EmbeddedFlight Control