Awareness Training
Human layer — phishing recognition and reporting; train yourself, do not phish strangers.
Visual · t16_awareness
Awareness = users as sensors, not targets for your labs. Original Cyberlium.
The best firewall cannot patch a click on a fake invoice — training can.
Security awareness covers phishing cues, password hygiene, reporting suspicious email, physical tailgating refusal, and safe browsing. Organizations run authorized simulations — Cyberlium teaches recognition and defender reporting paths on YOUR behavior and labeled lab examples. NEVER send phishing emails to classmates, never fake login pages on public nets, never 'awareness tests' without written authorization. Be the user who reports — not the attacker who tricks.
1. Phishing literacy
Check sender domain, urgency tricks, unexpected attachments, MFA fatigue prompts.
Report using org process — in lab, write what you would report to IT.
Command guide
Try these commands — Phishing literacy
═══ TOOLS & WEBSITES ═══ Browse / read these (authorized learning only — stay in YOUR lab / program scope)
Security awareness — https://www.cisa.gov/secure-our-world CIS Controls — https://www.cisecurity.org/controls
═══ INSTALL ═══
Linux (Debian/Ubuntu):
Command — copy this
sudo apt install curl
macOS: Built-in
Windows: Built-in (PowerShell: Invoke-WebRequest)
═══ LINUX / macOS ═══
Command — copy this
curl -sS https://www.cisa.gov/secure-our-world -o /dev/null -w "awareness HTTP %{http_code}
"
grep -i never "$HOME/cyberlium-lab/t16-defense/roe.txt" 2>/dev/nullPrimary tools to practice this lesson: curl, grep. Reference sites: Security awareness (https://www.cisa.gov/secure-our-world); CIS Controls (https://www.cisecurity.org/controls). Run every command in the box — install first, then the usage lines — only on YOUR lab / program scope.
2. Password and device hygiene
Unique passwords, MFA on accounts you own, lock screen on $LAB and daily driver.
No sharing creds in Discord 'for lab.'
3. Hard refusal
No phishing kits against friends, employers, or public.
Authorized simulation only with signed scope — course is not that scope.
4. What you ship: awareness checklist
Five phishing cues + report path + NEVER unauthorized phishing sentence.
5. What you record before the next lesson
Awareness checklist path.
6. Wrong vs right: stranger hosts vs YOUR lab hosts
Worked failure — same MSF word, opposite target. Right never needs a café Wi-Fi or classmate laptop.
- Wrong: Email fake IT login to classmates 'for awareness.'
- Right: Awareness cues listed. Next: backup lab.
Mission: awareness personal checklist
1) List five phishing red flags. 2) Write how you would report suspicious mail at work/school (generic). 3) Write NEVER send unauthorized phish.
Stuck? Ask Cyberlium AI Mentor
Ask Mentor: “MFA fatigue attack literacy?”
APPLY: Phishing email may use:
APPLY: True or False: Phishing classmates is awareness lab.
APPLY: Users should report: