Backup 3-2-1

Three copies, two media, one offsite — backup rule for YOUR lab data only.

Backup 3-2-1• Audio Walkthrough

00:00/02:34

Visual · t16_backup_321

3-2-1 = backup resilience pattern. Original Cyberlium.

Logs and configs you cannot restore are evidence you never had.

3-2-1 rule: three copies of data, on two different media, one offsite (or offline). Apply to $LAB notes, VM snapshots, and config exports — not exfil of stranger data 'for backup practice.' Defenders test restores; attackers rely on missing backups. Learn what to backup (OS, app data, configs, central logs) and encryption at rest for offsite copies you control.

1. 3-2-1 explained

Production copy + local backup + offsite/offline copy. Different media reduces single failure.

Offsite can be encrypted cloud bucket you own — not public paste.

Command guide

Try these commands — 3-2-1 explained

═══ LINUX / KALI (Penetration Testing & Service Audit) ═══

Port scan and service banner grabbing against authorized target

Command — copy this

nmap -sV -sC -Pn -T4 -p 21,22,80,443,445,3389 ${LAB_HOST:-127.0.0.1}

Enumerate web directories and hidden endpoints

Command — copy this

gobuster dir -u http://${LAB_HOST:-127.0.0.1} -w /usr/share/wordlists/dirb/common.txt -q -t 20 2>/dev/null || head -5 /etc/hosts

Metasploit framework module inspection (Safe lab syntax)

Command — copy this

msfconsole -q -x "use auxiliary/scanner/portscan/tcp; set RHOSTS 127.0.0.1; set PORTS 80,443; run; exit" 2>/dev/null || echo "Run in Kali msfconsole"

═══ WINDOWS (Audit Target) ═══ Enumerate open listening ports with process mappings

Command — copy this

netstat -ano | findstr /i "LISTENING"

Primary tools to practice this lesson: python3. Reference sites: NIST SP 800-34 (https://csrc.nist.gov/publications/detail/sp/800-34/rev-1/final). Run every command in the box — install first, then the usage lines — only on YOUR lab / program scope.