Defensive › Module 10 › Lesson 1
Checklist
One-page Topic 16 capstone checklist — RoE, hardening, logs, central, policy, backup.
Visual · t16_capstone_checklist
Checklist consolidates defensive basics. Original Cyberlium.
Opening
Capstone is proving discipline on YOUR hosts — not a audit of the internet.
Assemble checklist covering Modules 1–9: defense mindset and YOUR hosts RoE, Windows/Linux hardening, network device basics, logging fundamentals, OS logs and auth failures, central logging forward path, policy/patch/change control, backup 3-2-1 and restore test, awareness refusal list. Use in capstone walk on $LAB fleet only — never scan or log stranger infrastructure.
1. Scope and RoE
$LAB hosts named. NEVER stranger systems, phishing, or unauthorized changes.
Notes under $HOME/cyberlium-lab chmod 600.
Command guide
Try these commands — Scope and RoE
═══ TOOLS & WEBSITES ═══ Browse / read these (authorized learning only — stay in YOUR lab / program scope)
Defensive checklist — https://www.cisecurity.org/controls MITRE ATT&CK — https://attack.mitre.org/
═══ INSTALL ═══
Linux (Debian/Ubuntu): Built-in (iproute2)
macOS: Use: netstat
Windows: Use: netstat
═══ LINUX / macOS ═══
Command — copy this
ss -tulpn 2>/dev/null | head -12 journalctl -n 15 --no-pager 2>/dev/null | head -10 grep . "$HOME/cyberlium-lab/t16-defense/roe.txt" 2>/dev/null; printf 'checklist: ports logs firewall ' >> "$HOME/cyberlium-lab/t16-defense/capstone-checklist.txt"
Primary tools to practice this lesson: ss, journalctl, grep. Reference sites: Defensive checklist (https://www.cisecurity.org/controls); MITRE ATT&CK (https://attack.mitre.org/). Run every command in the box — install first, then the usage lines — only on YOUR lab / program scope.
2. Technical pillars
Hardening, local logs, central forward, time sync, policy, patch, backup restore.
Each item links to artifact or honest N/A with reason.
3. Human layer
Awareness checklist personal. Refuse unauthorized social engineering labs.
Teardown: revert temp configs, secure backups.
4. What you ship: Topic 16 capstone checklist
One-page defensive basics checklist for $LAB fleet.
5. What you record before the next lesson
Checklist file path.
6. Wrong vs right: stranger hosts vs YOUR lab hosts
Worked failure — same MSF word, opposite target. Right never needs a café Wi-Fi or classmate laptop.
Wrong
Use checklist to justify scanning class network.
Right
Checklist written. Next: evidence pack.
Mission: write defensive checklist
1) RoE/scope section. 2) Technical pillars section. 3) Awareness and teardown section.
Stuck? Ask Cyberlium AI Mentor
Ask Mentor: “Top five capstone items?”
Knowledge Check
APPLY: Checklist includes:
Multiple choice
Knowledge Check
APPLY: True or False: Checklist authorizes stranger hosts.
True or False
Knowledge Check
APPLY: Teardown includes:
Multiple choice