Checklist
Topic 27 capstone checklist — mobile mindset, Android/iOS literacy, MASVS, MDM, reporting on $MOB_LAB.
Visual · t27_capstone_checklist
Checklist consolidates mobile security literacy pillars. $MOB_LAB only. Original Cyberlium.
Capstone proves mobile security literacy on YOUR authorized lab work — not a portfolio of stranger phone exploits.
Assemble checklist covering Modules 1–9: mobile mindset and lab scope, Android architecture and APK/dynamic/network literacy, iOS arch and sandbox/jailbreak implications, MASVS/MASTG verification, secure coding fixes, MDM/BYOD/enterprise controls, reporting hygiene with RoE. Use on capstone walk of YOUR $MOB_LAB — never stranger devices, pinning bypass on unauthorized apps, covert MDM, or fabricated findings. Each row links artifact or honest N/A. Notes chmod 600 under $HOME/cyberlium-lab. Integrity rows: $MOB_LAB only, RoE stated, findings evidenced, limitations documented.
1. Scope and ethics
$MOB_LAB named with RoE reference. NEVER stranger phones, NEVER pinning bypass unauthorized apps, NEVER covert MDM, NEVER fabricated evidence.
Practice label when brief requires — honesty in capstone.
Command guide
Try these commands — Scope and ethics
═══ LINUX / macOS (Terminal Practice) ═══
Check system state and user context
Command — copy this
id whoami uname -a
Inspect network sockets listening for connections
Command — copy this
ss -tuln 2>/dev/null || netstat -tuln
Audit active processes
Command — copy this
ps aux | grep -v "\[" | head -15
═══ WINDOWS (POWERSHELL) ═══ Query user identity and system information
Command — copy this
whoami /all Get-ComputerInfo | Select-Object CsName, OsName, OsVersion
Primary tools to practice this lesson: grep, python3. Reference sites: OWASP MASVS (https://mas.owasp.org/MASVS/); OWASP MASTG (https://mas.owasp.org/MASTG/); Android security (https://developer.android.com/privacy-and-security/security-tips); Apple Platform Security (https://support.apple.com/guide/security/welcome/web). Run every command in the box — install first, then the usage lines — only on YOUR lab / program scope.
2. Literacy pillars
Mindset, Android stack, static/dynamic/TLS, iOS, MASVS/MASTG, MDM enterprise, reporting — linked rows.
Cross-link Topic 26 DFIR only as separate track — do not mix unauthorized dumps into mobile pack.
3. Teardown
Notes secured chmod 600, report pack ready, lab emulator snapshot revert optional per brief.
Archive retention note for mentor handoff.
4. What you ship: Topic 27 capstone checklist
One-page mobile security literacy capstone checklist for $MOB_LAB.
5. What you record before the next lesson
Checklist file path.
6. Wrong vs right: stranger phones vs lab emulator apps
Worked failure — same MSF word, opposite target. Right never needs a café Wi-Fi or classmate laptop.
- Wrong: Checklist includes row 'jailbreak classmate iPhone for bonus.'
- Right: Checklist written. Next: Lab Path.
Mission: write capstone checklist
1) Ethics/scope section. 2) Modules 1–9 pillar rows. 3) Teardown and handoff section.
Stuck? Ask Cyberlium AI Mentor
Ask Mentor: “Top five capstone artifacts?”
APPLY: Checklist includes:
APPLY: True or False: Stranger device testing required for capstone.
APPLY: Teardown includes: