Lab — Capstone

Create t38-m10-l04-capstone-lab.txt with checklist status, evidence index confirmation, NEVER grep results. Optional: curl CISA ICS recommended practices page for literacy citation. On $OT_LAB, document literacy rows on fictional LAB-OT-001 — never live plant IPs, credentials, or exploit steps.

Confirm all module packs exist under OT lab fictional LAB-OT-001. Zero exploit cookbooks or live target refs. On $OT_LAB, document literacy rows on fictional LAB-OT-001 — never live plant IPs, credentials, or exploit steps.

sudo apt install python3
sudo apt install curl

brew install python3

export OT_LAB=${OT_LAB:-$HOME/cyberlium-lab/t38-ot}
grep NEVER "$OT_LAB/notes/no-plant-attacks.txt" "$OT_LAB/roe.txt"
echo '=== Capstone: zones → protocols → threats → monitoring → hardening → incident ==='
grep -E 'NEVER|Defense' "$OT_LAB/notes/modbus-named.txt" "$OT_LAB/notes/stuxnet-named.txt"
grep PLC-001 "$OT_ASSETS/asset-inventory.csv"
grep '\[ \]' "$OT_LAB/notes/capstone-checklist.txt" | head -5
python3 - <<'PY'
import os
lab = os.environ.get('OT_LAB', os.path.expanduser('~/cyberlium-lab/t38-ot'))
path = os.path.join(lab, 'notes', 'capstone-summary.txt')
open(path, 'w').write('
'.join([
  'ICS/SCADA Security Capstone',
  'scope: YOUR ~/cyberlium-lab/t38-ot/ fictional LAB-OT-001 only',
  'protocols: Modbus/DNP3/OPC UA defensive literacy — no exploit cookbooks',
  'threats: Stuxnet history+defense — no replication',
  'segmentation: zone-map + firewall stub + remote access hygiene',
  'monitoring: visibility + anomaly + asset inventory',
  'hardening: patch governance + checklist + vendor hygiene',
  'incident: OT IR phases + reporting checklist + lessons learned',
  'never: Modbus exploit cookbooks / PLC attacks on live plants / unauthorized OT scans',
]))
print(f'Wrote {path}')
PY

grep -E 'scope|never|LAB-OT-001' "$OT_LAB/notes/capstone-summary.txt"
curl -sS https://www.cisa.gov/resources-tools/resources/ics-recommended-practices | head -3

Get-Content $HOME/cyberlium-lab/t38-ot/notes/no-plant-attacks.txt | Select-String NEVER
Get-Content $HOME/cyberlium-lab/t38-ot/notes/capstone-summary.txt | Select-String never

Primary tools to practice this lesson: grep, python3, curl. Reference sites: CISA ICS (https://www.cisa.gov/topics/industrial-control-systems); NIST SP 800-82 (https://csrc.nist.gov/publications/detail/sp/800-82/rev-3/final); CISA recommended practices (https://www.cisa.gov/resources-tools/resources/ics-recommended-practices). Run every command in the box — install first, then the usage lines — only on YOUR lab / program scope.

Grep entire t38-ot tree for forbidden patterns — redact if found. Capstone fails integrity if attack steps present. On $OT_LAB, document literacy rows on fictional LAB-OT-001 — never live plant IPs, credentials, or exploit steps.

Write one paragraph: Topic 38 means defensive OT literacy on MY OT lab. Prepare for topic quiz next. On $OT_LAB, document literacy rows on fictional LAB-OT-001 — never live plant IPs, credentials, or exploit steps.

chmod 600 — topic quiz next, then Topic 39 Dark Web. Capstone complete when integrity passes. On $OT_LAB, document literacy rows on fictional LAB-OT-001 — never live plant IPs, credentials, or exploit steps.

Ship: capstone summary. Next: Quiz — ICS/SCADA Topic.

Run capstone integrity review — checklist, path, evidence index, NEVER grep — on YOUR OT lab. $OT_LAB named. NEVER real-plant attack steps. chmod 600.

Date (UTC). Capstone Lab card. $OT_LAB named. File t38-m10-l04-capstone-lab.txt chmod 600.