Institution
Lake Washington Institute of Technology
Project Background
Project Overview
Master Sword Publishing, or MSPUB, was created as a fictional enterprise environment for my CSNT253 Capstone Project. The goal was to design, implement, secure, automate, troubleshoot, test, and document a small-scale enterprise IT infrastructure.
The project included a virtualized home lab, Active Directory Domain Services, DNS, Linux administration, Python automation, UniFi-based network design, an AWS-hosted Security Awareness Training campaign, an Incident Response Plan, server hardening, troubleshooting scenarios, and extensive technical documentation.
Project Background
Capstone at a Glance
A five-week enterprise infrastructure project completed as the culmination of the Computer Security and Network Technology program at Lake Washington Institute of Technology.
Instructor
Dr. Linda Epps
Completed
16 June 2026
Duration
5 Weeks
Environment
Small-to-Medium Enterprise
6
Operating Systems
7
Virtual Machines
2
Python Automation Scripts
6
AWS Services
2
Network Designs
Virtual & On-Premises
305
Documentation Pages
95+
Report Pages
Applied Knowledge
Skills Demonstrated
The project brought together the core systems, networking, cloud, security, automation, and documentation skills developed throughout the CSNT program.
- Enterprise Active Directory Administration
- DNS and DHCP Configuration
- Linux Systems Administration
- Python Automation Development
- AWS Cloud Architecture
- VLAN and Network Design
- Security Awareness Training
- Incident Response Planning
- Technical Documentation
- Troubleshooting and Validation
Enterprise IT Infrastructure
Technologies Used
The environment combined enterprise operating systems, identity services, Linux administration, automation, networking, cloud platforms, security planning, and technical documentation.
Windows Server 2025
Domain controllers, server roles, centralized authentication, and enterprise administration.
Active Directory & DNS
Active Directory Domain Services, domain integration, DNS configuration, and name resolution.
Client Operating Systems
Windows 11 Professional, macOS 26 Tahoe, Ubuntu Desktop 26.04 LTS, and Kali Linux 2026.
Ubuntu Server 26.04 LTS
Linux server administration, automation, secure services, web hosting, and user management.
Python Automation
Menu-driven scripts for server configuration, account management, logging, and batch operations.
Nginx & SFTP
Web hosting, secure file transfer, static site deployment, and service configuration.
Secure Shell
Remote Linux administration using SSH and secure command-line access.
Amazon Web Services
S3, CloudFront, Lambda, DynamoDB, CloudWatch, and AWS Certificate Manager.
UniFi Network Design
VLAN segmentation, routing concepts, firewall planning, wireless design, and infrastructure mapping.
Incident Response
Planning, classification, containment, recovery, post-incident review, and continuous improvement.
Technical Documentation
Implementation guides, validation evidence, screenshots, reports, diagrams, and presentation materials.
Implemented Environment
Infrastructure Built
The completed lab joined virtualized servers, workstations, directory services, name resolution, secure administration, hosting, and automation into one integrated enterprise environment.
Virtual Enterprise Lab
The MSPUB virtual environment was built using Parallels Desktop on a macOS host and included seven virtual machines representing servers, workstations, Linux systems, macOS, and a cybersecurity workstation.
- Primary Domain Controller: MSPUB-GLEEOK-DC01
- Secondary Domain Controller: MSPUB-COLGERA-DM01
- Ubuntu Web/App Server: MSPUB-LYNEL-WEB01
- Windows 11, Ubuntu Desktop, macOS, and Kali Linux workstations
7 Virtual Machines
6 Operating Systems
Parallels Desktop
Enterprise Services
Core services were configured to support centralized authentication, name resolution, secure administration, web hosting, file transfer, and cross-platform workstation integration.
- Active Directory Domain Services
- DNS name resolution and domain integration
- Windows, macOS, and Linux workstation integration
- Nginx web hosting and secure SFTP services
- SSH remote administration
- Python-based server and user-management automation
Active Directory
DNS
Nginx
SFTP
SSH
Python Development
Linux Automation
Two menu-driven Python tools automated repeatable Ubuntu Server configuration and account-administration workflows while preserving logging, validation, and operator control.
Python Automation
Web Server Configuration Script
The Web Server Configuration Script executes a predefined workflow to automate Ubuntu Server configuration, including Nginx installation, FTP setup, UFW configuration, website deployment, and administrative logging.
- Installs and configures Nginx
- Configures secure SFTP access
- Applies UFW firewall rules
- Deploys the MSPUB static website
- Records configuration activity in logs
Python 3
Ubuntu Server
Nginx
SFTP
UFW
Logging
Python Automation
User Management Script
The User Management Script provides a menu-driven interface for creating and removing users, managing groups, importing accounts from CSV files, performing bulk account operations, and logging administrative activity.
- Creates and removes Linux user accounts
- Creates and manages Linux groups
- Imports multiple users from CSV files
- Supports bulk account removal
- Records administrative actions in logs
Python 3
Linux Users
Linux Groups
CSV Import
Bulk Operations
Logging
Lab Use Recommended
These scripts modify Ubuntu Server packages, services, firewall rules, users, groups, and configuration files. Review the source code and test them in a disposable virtual machine or controlled lab environment before using them on another system.
Cloud Security Implementation
AWS Security Awareness Platform
As part of the MSPUB security program, I designed and deployed a simulated Microsoft 365 password-expiration campaign using multiple AWS services. The platform tracked participant activity, securely logged interactions, and redirected users to immediate awareness training after participation.
Amazon S3
Hosted the static phishing email landing page, educational website, images, JavaScript, CSS, and supporting assets.
Static Website Hosting
Amazon CloudFront
Delivered the awareness platform securely using HTTPS while improving availability and response times through AWS's CDN.
CDN Distribution
AWS Lambda
Executed serverless Python functions that processed phishing interactions and wrote participant events into DynamoDB.
Serverless Compute
Amazon DynamoDB
Stored participant events, timestamps, browser information, and reporting metrics collected during the awareness campaign.
NoSQL Database
Amazon CloudWatch
Monitored Lambda execution, logged application events, and assisted with troubleshooting throughout development.
Monitoring
AWS Certificate Manager
Managed SSL certificates allowing the awareness platform to be securely delivered over HTTPS.
SSL Certificates
Platform Workflow
Security Awareness Architecture
Seven connected stages move the simulation from delivery through secure processing, training, and centralized monitoring.
Microsoft 365
Phishing Email
CloudFront
HTTPS CDN
S3
Static Website
Lambda
Process Event
DynamoDB
Store Results
Training
User Education
CloudWatch
Logging
Architecture Summary
Enterprise Cloud Architecture
The awareness platform demonstrated how multiple AWS services integrate to create a secure, scalable, serverless solution. Static hosting, HTTPS delivery, serverless computing, event logging, centralized monitoring, and security best practices were combined into a complete phishing simulation environment suitable for enterprise awareness training.
Serverless
HTTPS
AWS
Security Awareness
Event Logging
Cloud Architecture
Cybersecurity Planning
Incident Response Plan
A structured response framework defined how MSPUB would prepare for, identify, contain, eradicate, recover from, and learn from security incidents.
Cybersecurity Planning
MSPUB Incident Response Plan
A formal Incident Response Plan was developed for Master Sword Publishing using ISO/IEC 27001 concepts and NIST incident-handling guidance. The plan established a structured process for preparing for, identifying, containing, resolving, and reviewing security incidents within the organization.
The Security Awareness Training campaign was incorporated as a practical phishing scenario, demonstrating incident detection, severity classification, reporting, containment, recovery, employee education, and post-incident improvement.
Preparation
Established policies, responsibilities, communication procedures, readiness activities, and response resources.
Detection & Analysis
Defined incident identification, validation, classification, documentation, and escalation procedures.
Containment
Documented short- and long-term actions used to limit impact, isolate affected systems, and preserve evidence.
Eradication
Addressed removal of malicious files, compromised access, vulnerabilities, and underlying causes.
Recovery
Covered service restoration, system validation, monitoring, user communication, and return to normal operations.
Lessons Learned
Included post-incident review, formal reporting, corrective actions, process improvement, and future prevention.
NIST Guidance
ISO/IEC 27001 Concepts
Phishing Response
Severity Classification
Evidence Preservation
Continuous Improvement
Major Accomplishments
Project Highlights
The finished Capstone demonstrates the breadth of the environment, from core infrastructure and automation through cloud security, validation, documentation, and presentation.
- Built a complete virtual enterprise lab using seven virtual machines across six operating systems.
- Configured two Windows Server domain controllers with Active Directory Domain Services and DNS.
- Integrated Windows, macOS, Ubuntu, and Kali Linux systems into the Master Sword Publishing environment.
- Developed two Python automation scripts for Linux server configuration and user administration.
- Designed a segmented UniFi network using VLANs, routing, wireless, firewall, and infrastructure-planning concepts.
- Built an AWS-hosted phishing simulation and Security Awareness Training platform using serverless cloud services.
- Created a formal Incident Response Plan based on recognized cybersecurity frameworks and incident-handling guidance.
- Produced more than 300 pages of implementation documentation and a professional capstone report.
- Recorded demonstration videos covering networking, automation, troubleshooting, AWS services, and validation testing.
- Produced and recorded a Keynote presentation summarizing the project, technical implementation, outcomes, and major accomplishments.
Submitted Work
Project Deliverables
The following three documents were submitted as the principal deliverables for the CSNT253 Capstone Project. Together, they provide a complete record of the planning, implementation, testing, validation, and presentation of the Master Sword Publishing enterprise environment.
3 Major Deliverables
Executive Project Report
MSPUB Capstone Report
A professionally written report documenting the project's planning, implementation, testing, validation, challenges encountered, lessons learned, and overall project outcomes.
95+ Pages
Planning
Implementation
Testing
Lessons Learned
Complete Implementation Record
MSPUB Technical Documentation
Complete implementation documentation containing installation procedures, screenshots, validation evidence, troubleshooting, testing, and configuration details for every major task completed throughout the Capstone Project.
305 Pages
Screenshots
Validation
Troubleshooting
Configuration
Evidence
Final Project Presentation
MSPUB Capstone Presentation
The presentation used during my final Capstone defense, highlighting the enterprise environment, major accomplishments, demonstrations, automation, cloud implementation, and lessons learned.
Keynote
Demonstrations
Infrastructure
Automation
AWS
Presentation
Recorded Validation
Presentation & Demonstration Recordings
The recorded playlist validates the completed implementation through networking, Active Directory, Linux automation, AWS security awareness, troubleshooting, and full-project walkthroughs.
Presentation Recording
21-minute complete presentation with selected demonstrations.
Live Demonstrations
Network segmentation, DNS/DHCP validation, Linux automation, and troubleshooting.
AWS Security Awareness Training Platform
The phishing campaign workflow, participant tracking, and reporting overview.
Project Reflection
Lessons Learned
This project reinforced the importance of planning, documentation, testing, and structured troubleshooting in enterprise IT environments. It demonstrated how closely connected services such as DNS, Active Directory, Linux, networking, automation, cloud infrastructure, and security workflows are within a complete business environment.
It also strengthened my ability to manage a large project, validate technical work, document implementation decisions, resolve unexpected problems, and communicate complex systems through reports, demonstrations, and a formal presentation.
Continue Exploring
Interested in This Capstone Project?
Explore the rest of my technical portfolio or contact me to discuss cloud computing, infrastructure, networking, automation, or professional opportunities.