During cybersecurity training, the trainees use command-line tools to solve various cybersecurity problems. Their command history is saved in logs that can be exploratively analyzed to find different approaches trainees took while completing their tasks. In the theoretical part of the thesis, the student will introduce selected relevant clustering techniques and provide the background necessary for understanding the practical part of the thesis. He will also give an overview of related literature. In the practical part of the work, the student will transform the command-line logs from a pre-defined textual format to a form suited for cluster analysis. After choosing an appropriate clustering method, the student will use a suitable Python module and apply the selected clustering algorithm to discover different types of trainees based on their command histories. Finally, the student will interpret and visualize the resulting clusters and discuss their significance and possible applications.