Threat Hunting: Cowrie Honeypot - Question on Panama

seanmatthews225 👋 Thanks for your question! I've had a look at this lab, and you are right, the geolocation in the logs is not matching what we were expecting. I've updated question 5 to ask for the number of login attempts from Cyprus rather than Panama, as I can see that data from Cyprus is populating the Location Overview dashboard. I'm hoping this means you'll be able to complete the lab, and the Threat Hunting collection. 

If you have any other problems, please let me know! 😁