Context and objective
The Evil Corp scenario concerns a business-critical Linux infrastructure. It addresses four complementary areas: system hardening, monitoring, backup and disaster recovery across RHEL and Ubuntu Server environments.
Architecture and method
Security combines SSH hardening, MFA, sudoers rules, ufw or firewalld, auditd logging and mandatory access controls through SELinux or AppArmor. Prometheus and Node Exporter provide operational visibility. Backups use rsync and Borg with an off-site copy, encryption and retention policy, while the recovery plan formalizes failover and restoration.
Implementation
Privileged access is reduced and traced, confinement and firewall policies are applied, and relevant system events are audited. Host metrics are exposed to Prometheus. Backup and recovery procedures are documented with restoration and failover tests so that they are verified rather than merely theoretical.
Results and deliverables
The project delivers a technical report, a presentation and a demonstration document. Together they document access controls, anomaly detection, monitoring, encrypted retained backups and tested recovery procedures.
Lessons learned
Effective hardening combines prevention, traceability and recoverability. The project also shows that a backup is credible only after a successful restore and that a disaster recovery plan must state concrete failover operations rather than remain a general principle.