Scan Notes
Index redacted scan and triage artifacts — YOUR $LAB_ASSETS engagement evidence.
Visual · t18_scan_notes
Scan notes = indexed evidence from YOUR VA work. Original Cyberlium.
Reviewers trust an index with redaction notes — not a folder called final_scan_leaked.
Build scan notes index listing capstone artifacts: RoE, asset inventory, scan export summary, CVSS lab, triage workbook, VA report, remediation tracker, retest log. Fields: path, date, one-line description, redactions applied. All from $LAB_ASSETS under RoE — no employer tickets, no classmate scan shares, no unauthorized production. chmod 600 index under $HOME/cyberlium-lab.
1. Index fields
Artifact name, module lesson, file path, UTC date, description, redactions.
Cross-link checklist row to index row.
Command guide
Try these commands — Index fields
═══ TOOLS & WEBSITES ═══ Browse / read these (authorized learning only — stay in YOUR lab / program scope)
Report quality — evidence from YOUR lab scans only FIRST CVSS — https://www.first.org/cvss/
═══ INSTALL ═══
Linux (Debian/Ubuntu):
Command — copy this
sudo apt install jq
macOS:
Command — copy this
brew install jq
Windows:
Command — copy this
choco install jq
═══ LINUX / macOS ═══
Command — copy this
grep -c open "$HOME/cyberlium-lab/t18-inventory.txt" 2>/dev/null || echo '0' curl -sS 'https://services.nvd.nist.gov/rest/json/cves/2.0?cveId=CVE-2021-44228' | jq '.vulnerabilities[0].cve.id'
Primary tools to practice this lesson: jq, grep. Reference sites: Report quality; FIRST CVSS (https://www.first.org/cvss/). Run every command in the box — install first, then the usage lines — only on YOUR lab / program scope.
2. Redaction log
Note masked IPs, creds, hostnames per evidence hygiene lesson.
Scanner version and credentialed Y/N recorded.
3. Integrity
Optional hash after final edit for personal record.
No public upload of raw scan with live internal data.
4. What you ship: scan notes index
Index table with ≥8 artifacts from $LAB_ASSETS modules.
5. What you record before the next lesson
Scan notes index path.
6. Wrong vs right: stranger nets vs YOUR lab assets
Worked failure — same MSF word, opposite target. Right never needs a café Wi-Fi or classmate laptop.
- Wrong: Include unauthorized internet scan export in capstone index.
- Right: Index redacted scan artifacts. Next: report pack.
Mission: scan notes index
1) List RoE through retest artifacts. 2) Add path and date each. 3) Note redactions applied.
Stuck? Ask Cyberlium AI Mentor
Ask Mentor: “Minimum artifacts for capstone?”
APPLY: Scan notes index is:
APPLY: True or False: Live creds in mentor pack OK.
APPLY: Index should note:
Report Pack
Part of Vulnerability Assessment — Capstone and Topic Quiz.
Capstone Lab
Part of Vulnerability Assessment — Capstone and Topic Quiz.
Quiz — Vulnerability Assessment Topic
Part of Vulnerability Assessment — Capstone and Topic Quiz.