Security › Module 10 › Lesson 3
Evidence Pack
Bundle Topic 41 literacy evidence from `$ARCH_LAB` LAB-ARCH-001 — SABSA, enterprise, control selection, review/docs; no offensive refs.
Visual · t41_evidence_pack
Evidence pack = mentor handoff from $ARCH_LAB LAB-ARCH-001 literacy. Original Cyberlium.
Opening
One indexed pack beats scattered architecture notes — and never includes offensive design or stranger org architecture data.
Assemble evidence pack: `$ARCH_LAB` LAB-ARCH-001 fictional org template inventory, lab setup proof, defense and STRIDE labs if brief assigned, pattern lab, SABSA lab, enterprise lab, control selection lab, review lab, integrity statement (YOUR fictional org LAB-ARCH-001 only, LAB labels mandatory, no offensive architecture, no stranger org reviews, defensive design only, limitations documented). Directory chmod 600 — index.md lists contents UTC redactions. Mentor copy: diagrams + review stubs + control traces, not attack cookbooks. Gap paragraph for Topic 42 Certification Prep Hub — separate authorized track. Scan folder for offensive architecture files and stranger org review notes — zero tolerance.
1. Pack contents
Minimum: LAB-ARCH-001 inventory, SABSA, enterprise, control selection, review, integrity index.
Optional: module labs per brief — no refused offensive content files.
Command guide
Try these commands — Pack contents
═══ TOOLS & WEBSITES ═══ Browse / read these (authorized learning only — stay in YOUR lab / program scope)
OWASP Threat Modeling — https://cheatsheetseries.owasp.org/cheatsheets/Threat_Modeling_Cheat_Sheet.html Microsoft SDL — https://www.microsoft.com/en-us/securityengineering/sdl/ NIST 800-160 — https://csrc.nist.gov/publications/detail/sp/800-160/vol-1/rev-1/final
═══ INSTALL ═══
Linux (Debian/Ubuntu):
Command — copy this
sudo apt install python3
macOS:
Command — copy this
brew install python3
Windows: Download https://python.org/downloads/
═══ LINUX / macOS ═══
Command — copy this
export ARCH_LAB=${ARCH_LAB:-$HOME/cyberlium-lab/t41-arch}
python3 - <<'PY'
import os
lab = os.environ.get('ARCH_LAB', os.path.expanduser('~/cyberlium-lab/t41-arch'))
path = os.path.join(lab, 'notes', 'capstone-evidence-index.txt')
open(path, 'w').write('
'.join([
'CAPSTONE EVIDENCE INDEX — YOUR t41-arch lab fictional LAB-ARCH-001 only',
'Ethics: roe.txt, defensive-only.txt',
'Fundamentals: cia-did-named.txt + trust-boundaries-named.txt',
'Design: secure-by-design-checklist.md + defense-in-depth-layers.md',
'STRIDE: worksheet-template + customer-portal + admin-console',
'Diagrams: context-diagram + container-diagram + dfd-order-flow',
'Patterns: api-gateway + microservices + pattern-catalog-stub',
'SABSA: attribute-stub + attribute-trace-order-api',
'Enterprise: ea-alignment-stub + togaf-adm-phases.md',
'Controls: control-selection-table + asvs-mapping-literacy.md',
'Label: LAB SAMPLE on all artifacts — defensive architecture literacy',
'Refusals: no offensive attack cookbooks / no unauthorized bypass how-tos',
]))
print(f'Wrote {path}')
PYCommand — copy this
grep -E 'LAB SAMPLE|Refusals|STRIDE' "$ARCH_LAB/notes/capstone-evidence-index.txt"
Primary tools to practice this lesson: grep, python3. Reference sites: OWASP Threat Modeling (https://cheatsheetseries.owasp.org/cheatsheets/Threat_Modeling_Cheat_Sheet.html); Microsoft SDL (https://www.microsoft.com/en-us/securityengineering/sdl/); NIST 800-160 (https://csrc.nist.gov/publications/detail/sp/800-160/vol-1/rev-1/final). Run every command in the box — install first, then the usage lines — only on YOUR lab / program scope.
2. Index fields
Artifact name, module lesson, path, UTC date, description, LAB label, redactions applied.
Checklist row ↔ index row accountability.
3. Integrity
$ARCH_LAB LAB-ARCH-001 only, LAB label discipline, no offensive refs, share-safe export.
Scan before seal — remove accidental stranger org data or offensive architecture files.
4. What you ship: architecture evidence pack
Bundled deliverables + index + integrity — chmod 600, diagrams not attack guides default.
5. What you record before the next lesson
Evidence pack path.
6. Wrong vs right: offensive playbooks vs YOUR threat models
Worked failure — same MSF word, opposite target. Right never needs a café Wi-Fi or classmate laptop.
Wrong
Evidence pack includes offensive attack architecture and stranger org review data.
Right
Evidence pack assembled. Next: Capstone Lab.
Mission: assemble evidence pack
1) Bundle SABSA through review index. 2) Integrity statements. 3) Confirm zero offensive refs. 4) Gap note for Topic 42 Certification Prep.
Stuck? Ask Cyberlium AI Mentor
Ask Mentor: “Minimum index rows for capstone?”
Knowledge Check
APPLY: Evidence pack includes:
Multiple choice
Knowledge Check
APPLY: True or False: Offensive architecture OK in pack.
True or False
Knowledge Check
APPLY: Integrity line states:
Multiple choice