Checklist
One-page Topic 18 capstone checklist — RoE, scan, CVSS, triage, report, remediate on YOUR lab.
Visual · t18_capstone_checklist
Checklist consolidates VA pillars. Original Cyberlium.
Capstone proves discipline on assets you own — not a highlight reel of stranger scans.
Assemble checklist covering Modules 1–9: VA mindset and RoE ($LAB_ASSETS only), asset inventory, scanner literacy, CVE/NVD reading (no PoC required), CVSS scoring, false positive triage and safe verify, VA report with evidence hygiene, remediation tracker with retest. Use on capstone walk of YOUR lab engagement only — never scan, report, or remediate stranger networks. Notes chmod 600 under $HOME/cyberlium-lab.
1. Scope and RoE
$LAB_ASSETS inventory named. NEVER stranger scans, exploit PoCs, Shodan dumps.
Written RoE with stop conditions and scan window.
Command guide
Try these commands — Scope and RoE
═══ TOOLS & WEBSITES ═══ Browse / read these (authorized learning only — stay in YOUR lab / program scope)
VA checklist — inventory + CVE + CVSS + finding NVD — https://nvd.nist.gov
═══ INSTALL ═══
Linux (Debian/Ubuntu):
Command — copy this
sudo apt install curl
macOS: Built-in
Windows: Built-in (PowerShell: Invoke-WebRequest)
═══ LINUX / macOS ═══
Command — copy this
ls -la "$HOME/cyberlium-lab"/t18-*.txt 2>/dev/null curl -sS 'https://services.nvd.nist.gov/rest/json/cves/2.0?resultsPerPage=1' | jq '.format'
Primary tools to practice this lesson: grep, curl. Reference sites: VA checklist; NVD (https://nvd.nist.gov). Run every command in the box — install first, then the usage lines — only on YOUR lab / program scope.
2. VA pillars
Scan export, CVSS annotations, triage workbook, VA report, remediation tracker, retest log.
Each checklist row links artifact or honest N/A with reason.
3. Teardown habit
Secure evidence chmod 600. Revoke disposable scan creds.
VM snapshot restore if capstone required clean state.
4. What you ship: Topic 18 capstone checklist
One-page VA checklist for $LAB_ASSETS engagement.
5. What you record before the next lesson
Checklist file path.
6. Wrong vs right: stranger nets vs YOUR lab assets
Worked failure — same MSF word, opposite target. Right never needs a café Wi-Fi or classmate laptop.
- Wrong: Use checklist to justify scanning classmate lab VLAN.
- Right: Checklist written. Next: scan notes.
Mission: write VA capstone checklist
1) RoE/scope section. 2) Scan through retest pillars. 3) Teardown and refusal section.
Stuck? Ask Cyberlium AI Mentor
Ask Mentor: “Top five capstone artifacts?”
APPLY: Checklist includes:
APPLY: True or False: Checklist authorizes stranger prod scans.
APPLY: Teardown includes:
Scan Notes
Part of Vulnerability Assessment — Capstone and Topic Quiz.
Report Pack
Part of Vulnerability Assessment — Capstone and Topic Quiz.
Capstone Lab
Part of Vulnerability Assessment — Capstone and Topic Quiz.