Lab — Devices
Pack posture, MDM/EDR, and hygiene cards — device trust pillar file from $ZT_LAB devices folder.
Visual · t40_device_lab
Lab: device trust pack. $ZT_LAB only. Original Cyberlium.
Device pack merges posture matrix, MDM/EDR roles, and hygiene checklist into LAB-ZT-001/devices/ artifact.
Merge M4 lessons into device-trust-pack.md with diagram: Device → MDM + EDR → IdP CA. Cross-link M3 conditional access matrix. No EDR tampering, real serial numbers, or employer Intune exports. Next: Quiz — Device Trust.
1. Lab contract: device trust pack
Merge posture matrix, MDM/EDR card, hygiene checklist into devices/device-trust-pack.md.
Include one non-compliant device remediation example.
Command guide
Try these commands — Lab contract: device trust pack
═══ TOOLS & WEBSITES ═══ Browse / read these (authorized learning only — stay in YOUR lab / program scope)
CISA ZTMM Devices — https://www.cisa.gov/zero-trust-maturity-model NIST SP 800-207 — https://csrc.nist.gov/publications/detail/sp/800-207/final
═══ INSTALL ═══
Linux (Debian/Ubuntu):
Command — copy this
sudo apt install python3
macOS:
Command — copy this
brew install python3
Windows: Download https://python.org/downloads/
═══ LINUX / macOS ═══
Command — copy this
export ZT_LAB=${ZT_LAB:-$HOME/cyberlium-lab/t40-zt}
export ZT_DEVICES=${ZT_DEVICES:-$ZT_LAB/LAB-ZT-001/devices}
cat > "$ZT_DEVICES/device-trust-pack.md" <<'EOF'
# Device Trust Pillar Pack — LAB-ZT-001
Includes: posture-matrix.csv, mdm-edr-role-card.md, hygiene-checklist.md
Diagram: Device → MDM + EDR → IdP CA (links M3 CA matrix)
Example: D-005 non-compliant → block sensitive apps
LAB SAMPLE — NOT FOR PRODUCTION ARCHITECTURE CLAIMS
EOFCommand — copy this
grep -E 'Device Trust|D-005|LAB SAMPLE' "$ZT_DEVICES/device-trust-pack.md" cat > "$ZT_LAB/notes/device-lab-summary.md" <<'EOF' # Device Lab Summary — YOUR lab - device-posture-matrix.csv with non-compliant row - mdm-edr-role-card.md + hygiene-checklist.md ## Refusals - No EDR tampering; no employer Intune exports EOF
Command — copy this
grep -E 'Refusals|posture-matrix' "$ZT_LAB/notes/device-lab-summary.md" wc -l "$ZT_DEVICES/device-posture-matrix.csv"
═══ WINDOWS ═══
Command — copy this
Get-Content $HOME/cyberlium-lab/t40-zt/LAB-ZT-001/devices/device-posture-matrix.csv | Select-String D-005
Primary tools to practice this lesson: grep, python3. Reference sites: CISA ZTMM Devices (https://www.cisa.gov/zero-trust-maturity-model); NIST SP 800-207 (https://csrc.nist.gov/publications/detail/sp/800-207/final). Run every command in the box — install first, then the usage lines — only on YOUR lab / program scope.
2. Cross-check
Remove real IMEI, employer device IDs, EDR disable instructions.
LAB SAMPLE header + link identity pillar pack.
3. Lock
chmod 600. Quiz next — Microseg Named.
Device pack feeds microsegmentation user/device group mapping.
4. What you ship: device trust pack
Merged device artifacts in LAB-ZT-001/devices/. $ZT_LAB. chmod 600.
5. What you record before the next lesson
Date. Device pack path. $ZT_LAB named. File t40-m04-l04-device-lab.txt chmod 600.
6. Wrong vs right: bypass cookbooks vs YOUR ZT design
Worked failure — same MSF word, opposite target. Right never needs a café Wi-Fi or classmate laptop.
- Wrong: Append EDR uninstall guide. Import employer device inventory CSV.
- Right: Write device trust pack for $ZT_LAB. Next: Quiz — Device Trust.
Mission: device trust pack
1) Merge M4 sections. 2) Integration diagram to IdP. 3) One remediation example. 4) chmod 600.
Stuck? Ask Cyberlium AI Mentor
Device groups in pack become microseg policy group inputs in M5.
APPLY: Device lab pack includes:
APPLY: True or False: Device pack links to identity CA matrix.
APPLY: Device lab refuses: