Security › Module 6 › Lesson 4
Lab — SABSA
SABSA literacy lab on `$ARCH_LAB` — layer card, business context sheet, attribute profile matrix bundled for LAB-ARCH-001.
Visual · t41_sabsa_lab
Lab: SABSA pack on YOUR $ARCH_LAB LAB-ARCH-001. Original Cyberlium.
Opening
Ship SABSA literacy artifacts from YOUR lab org — layers, context, attributes — zero stranger org diagrams or offensive architecture.
On YOUR `$ARCH_LAB` per brief: (1) scope proof — LAB-ARCH-001 fictional org template path labeled LAB; (2) SABSA layer card Module 6-1; (3) business context sheet Module 6-2; (4) attribute profile matrix Module 6-3; (5) SABSA summary stub (layer count, context row count, zone count); (6) integrity — `$ARCH_LAB` only, LAB-ARCH-001 scope, no stranger org architecture, no offensive attack design, defensive literacy only; (7) chmod 600 pack. Cross-link Modules 2–5 defense and pattern literacy — professional SABSA handoff.
1. Lab deliverables
Layer + context + attribute matrix cross-indexed to one LAB-ARCH-001 org.
Summary cites honest zone and layer coverage — not zero-fiction completeness.
Command guide
Try these commands — Lab deliverables
═══ LINUX / macOS (Terminal Practice) ═══
Check system state and user context
Command — copy this
id whoami uname -a
Inspect network sockets listening for connections
Command — copy this
ss -tuln 2>/dev/null || netstat -tuln
Audit active processes
Command — copy this
ps aux | grep -v "\[" | head -15
═══ WINDOWS (POWERSHELL) ═══ Query user identity and system information
Command — copy this
whoami /all Get-ComputerInfo | Select-Object CsName, OsName, OsVersion
Primary tools to practice this lesson: grep, curl. Reference sites: OWASP ASVS (https://owasp.org/www-project-application-security-verification-standard/); Microsoft patterns (https://learn.microsoft.com/en-us/azure/architecture/patterns/); NIST 800-53 (https://csrc.nist.gov/publications/detail/sp/800-53/rev-5/final). Run every command in the box — install first, then the usage lines — only on YOUR lab / program scope.
2. Quality bar
Every design sample labeled LAB and LAB-ARCH-001 — not production stranger org data.
Zero offensive attack architecture files in pack.
3. Teardown
Secure notes chmod 600; SABSA pack ready for enterprise reference module.
Archive stub optional per brief.
4. What you ship: SABSA lab pack
Layer + context + attributes + summary + integrity — chmod 600.
5. What you record before the next lesson
SABSA lab pack path.
6. Wrong vs right: offensive playbooks vs YOUR threat models
Worked failure — same MSF word, opposite target. Right never needs a café Wi-Fi or classmate laptop.
Wrong
SABSA lab includes offensive attack path diagram as bonus deliverable.
Right
SABSA lab pack on `$ARCH_LAB` LAB-ARCH-001. Next: quiz.
Mission: SABSA lab
1) Scope and LAB-ARCH-001 template proof. 2) SABSA layer card and business context. 3) Attribute profile matrix. 4) Integrity block; chmod 600.
Stuck? Ask Cyberlium AI Mentor
Ask Mentor: “SABSA summary — minimum metric rows?”
Knowledge Check
APPLY: SABSA lab scope:
Multiple choice
Knowledge Check
APPLY: True or False: Offensive attack diagrams earn SABSA lab credit.
True or False
Knowledge Check
APPLY: SABSA lab pack should:
Multiple choice