Checklist

One-page Topic 16 capstone checklist — RoE, hardening, logs, central, policy, backup.

Checklist• Audio Walkthrough

00:00/02:25

Visual · t16_capstone_checklist

Checklist consolidates defensive basics. Original Cyberlium.

Capstone is proving discipline on YOUR hosts — not a audit of the internet.

Assemble checklist covering Modules 1–9: defense mindset and YOUR hosts RoE, Windows/Linux hardening, network device basics, logging fundamentals, OS logs and auth failures, central logging forward path, policy/patch/change control, backup 3-2-1 and restore test, awareness refusal list. Use in capstone walk on $LAB fleet only — never scan or log stranger infrastructure.

1. Scope and RoE

$LAB hosts named. NEVER stranger systems, phishing, or unauthorized changes.

Notes under $HOME/cyberlium-lab chmod 600.

Command guide

Try these commands — Scope and RoE

═══ TOOLS & WEBSITES ═══ Browse / read these (authorized learning only — stay in YOUR lab / program scope)

Defensive checklist — https://www.cisecurity.org/controls MITRE ATT&CK — https://attack.mitre.org/

═══ INSTALL ═══

Linux (Debian/Ubuntu): Built-in (iproute2)

macOS: Use: netstat

Windows: Use: netstat

═══ LINUX / macOS ═══

Command — copy this

ss -tulpn 2>/dev/null | head -12
journalctl -n 15 --no-pager 2>/dev/null | head -10
grep . "$HOME/cyberlium-lab/t16-defense/roe.txt" 2>/dev/null; printf 'checklist: ports
logs
firewall
' >> "$HOME/cyberlium-lab/t16-defense/capstone-checklist.txt"

Primary tools to practice this lesson: ss, journalctl, grep. Reference sites: Defensive checklist (https://www.cisecurity.org/controls); MITRE ATT&CK (https://attack.mitre.org/). Run every command in the box — install first, then the usage lines — only on YOUR lab / program scope.