A lab snapshot name is not the objective you practiced

The name is a string

A snapshot name is whatever you typed when you saved the machine’s state. “logs-done” or a date tells you which restore point you meant. It does not contain an objective id unless you put one in the name and you still record it in the study note.

Restoring the snapshot returns the machine to that state. It does not replay a write-up you never saved.

The mapping is the study note

Coverage of an objective is a line in the tracker: the objective id, what you did, and which snapshot you can restore to repeat it. If that line is missing, the objective is not documented, whatever the snapshot is called.

One snapshot can support one exercise. Do not mark a whole domain complete because a single name sounds broad.

What to write down

File the VM name, the snapshot name, the time you took it, and the objective id from the tracker if you have one. If the tracker has no line, write “no objective mapped.” Do not invent an id from the label.

Lab: a snapshot called logs-done

The lab VM siem has a snapshot named logs-done, taken 2026-11-02. The study tracker has no row that mentions that snapshot or an objective id. A draft marks objective 4.9 complete because the name mentions logs.

The note lists the VM, the snapshot name, and the time. It says no objective is mapped. Objective 4.9 stays unfinished in the tracker until a row names the exercise and the snapshot. The label is not edited into an id.

vm: siem
snapshot: logs-done
taken: 2026-11-02
tracker row for this snapshot: none
write: label only
not: objective 4.9 complete