Lab — Principles

Pack NIST 800-207, verify explicitly, and least privilege cards — principles file from $ZT_LAB only with architecture diagram stub.

Lab — Principles• Audio Walkthrough

00:00/02:51

Visual · t40_principles_lab

Lab: ZT principles pack. $ZT_LAB only. Original Cyberlium.

Principles pack merges NIST tenets into one diagram — PE/PA/PEP boxes plus verify flow on fictional LAB-ZT-001.

Lessons 2-1–2-3 named NIST components, verify explicitly, and least privilege. This lab merges three sections into one $ZT_LAB principles artifact with M1 ethics cross-reference and combined architecture diagram stub. No attack tools, real employer IdP exports, or production architecture claims — principles literacy paperwork only. Next: Quiz — ZT Principles.

1. Lab contract: principles literacy pack

Create principles pack merging NIST component card, verify-explicitly flow, least-privilege matrix, and combined diagram with PE/PA/PEP labeled.

Footer cites NIST SP 800-207 curl date and LAB SAMPLE label.

Command guide

Try these commands — Lab contract: principles literacy pack

═══ LINUX / macOS (Terminal Practice) ═══

Check system state and user context

Command — copy this

id
whoami
uname -a

Inspect network sockets listening for connections

Command — copy this

ss -tuln 2>/dev/null || netstat -tuln

Audit active processes

Command — copy this

ps aux | grep -v "\[" | head -15

═══ WINDOWS (POWERSHELL) ═══ Query user identity and system information

Command — copy this

whoami /all
Get-ComputerInfo | Select-Object CsName, OsName, OsVersion

Primary tools to practice this lesson: grep, curl. Reference sites: NIST SP 800-207 (https://csrc.nist.gov/publications/detail/sp/800-207/final); CISA ZTMM (https://www.cisa.gov/zero-trust-maturity-model). Run every command in the box — install first, then the usage lines — only on YOUR lab / program scope.

2. Cross-check ethics

Grep for attack tool refs, stranger org targets, employer tenant IDs — remove. Confirm fictional org LAB-ZT-001 throughout.

Link M1 no-attack-tools ethics card in pack header.

3. Lock the proof

chmod 600 on pack. Quiz next — then Identity Named.

Principles pack feeds identity pillar lessons in M3.

4. What you ship: ZT principles literacy pack

Merged NIST + verify + least privilege + diagram. $ZT_LAB named. NO attack tools. chmod 600.

5. What you record before the next lesson

Date. Principles pack path. $ZT_LAB named. File t40-m02-l04-principles-lab.txt chmod 600.

6. Wrong vs right: bypass cookbooks vs YOUR ZT design

Worked failure — same MSF word, opposite target. Right never needs a café Wi-Fi or classmate laptop.

Wrong: Include Metasploit lateral movement section in principles pack. Skip NIST citation.
Right: Write YOUR principles pack for $ZT_LAB. chmod 600. Next: Quiz — ZT Principles.

Hands-on Exercise