Defensive › Module 9 › Lesson 4
Backup Lab
Backup and restore one $LAB artifact — 3-2-1 evidence in notes chmod 600.
Visual · t16_backup_lab
Lab: backup + restore on $LAB. Original Cyberlium.
Opening
One file backed up and restored beats a slide deck about 3-2-1.
Choose $LAB artifact (policy file, log snippet, VM export). Create backup copy on second media (zip to USB image, second folder, or snapshot). Perform restore test to isolated path. Document 3-2-1 mapping and restore time in $HOME/cyberlium-lab/t16-m09-backup-lab.txt chmod 600. No backing up or exfiltrating stranger systems.
1. Backup action
tar or copy config/notes to backup location with timestamp.
Encrypt if leaving host — even in lab habit.
Command guide
Try these commands — Backup action
═══ TOOLS & WEBSITES ═══ Browse / read these (authorized learning only — stay in YOUR lab / program scope)
Backup lab — https://www.cisa.gov/news-events/news/backup-and-recovery CIS Controls — https://www.cisecurity.org/controls
═══ INSTALL ═══
Linux (Debian/Ubuntu):
macOS:
Windows:
═══ LINUX / macOS ═══
Command — copy this
journalctl -n 10 --no-pager 2>/dev/null | head -8 tar -tzf /tmp/cyberlium-backup-test.tgz 2>/dev/null || tar -czf /tmp/cyberlium-backup-test.tgz "$HOME/cyberlium-lab/t16-defense/roe.txt" 2>/dev/null && tar -tzf /tmp/cyberlium-backup-test.tgz
Primary tools to practice this lesson: tar, journalctl. Reference sites: Backup lab (https://www.cisa.gov/news-events/news/backup-and-recovery); CIS Controls (https://www.cisecurity.org/controls). Run every command in the box — install first, then the usage lines — only on YOUR lab / program scope.
2. Restore verify
Restore to tmp or restore-test folder; diff or hash compare.
Record seconds/minutes to restore.
3. Teardown
Remove temp restore copies with secrets if duplicated.
Keep backup catalog updated in mini-policy.
4. What you ship: backup lab evidence
Backup path + restore verify + 3-2-1 mapping + timing.
5. What you record before the next lesson
Backup lab notes path.
6. Wrong vs right: stranger hosts vs YOUR lab hosts
Worked failure — same MSF word, opposite target. Right never needs a café Wi-Fi or classmate laptop.
Wrong
Archive employer share drive to personal cloud 'for 3-2-1 practice.'
Right
Backup/restore on $LAB data. Next: quiz.
Mission: backup lab
1) Backup one $LAB artifact to second media. 2) Restore and verify. 3) Document 3-2-1 and timing; chmod 600.
Stuck? Ask Cyberlium AI Mentor
Ask Mentor: “Encrypt tar backup one-liner?”
Knowledge Check
APPLY: Backup lab uses:
Multiple choice
Knowledge Check
APPLY: True or False: Exfil stranger data for backup lab.
True or False
Knowledge Check
APPLY: After restore verify:
Multiple choice