Kalos Cybersecurity LLC

SL-02 — Windows Robocopy transfer and verification

Supplemental lab · v23 · complements the Progressive Labs without changing their sequence

Learning objective

Windows Robocopy transfer and verification. Produce a documented result that distinguishes content integrity, metadata behavior and the limits of your test.

Prerequisites

Disposable Windows lab; selected synthetic files; separate source and destination.

Tools

  • PowerShell
  • Robocopy
  • Supplied student scripts

Lab resources — start here

Procedure

  1. Extract the student kit and read its guide and script help before execution. Identify a synthetic source and a separate destination; record both absolute paths.

  2. Follow the guide’s preview stage. Retain the dry-run command, output and expected selection; do not use mirror or move options for this exercise.

  3. Run the documented logged copy. Capture the command, exit code and summary; explain copied, skipped and failed counts.

  4. Repeat the documented copy and explain why already matching files are skipped.

  5. Run the supplied SHA-256 comparison. Retain the inventory and explain what file-stream equality proves and which NTFS properties it does not prove.

  6. Submit the worksheet and a short preservation conclusion, distinguishing copy success from verified content equality.

Submit

Source/destination scope; preview output; initial and repeat logs; exit-code interpretation; inventories and hashes; metadata limitations; completed worksheet.

For each screenshot, include the command, relevant input, complete result and a step label. Keep raw logs with screenshots. Report errors and untested steps explicitly.

Completion criteria

  • Correct input scope and recorded environment.
  • Commands follow the companion guide and their exit status is explained.
  • Content checks and metadata observations are supported by retained evidence.
  • Results distinguish observations from expected examples and untested claims.
  • The analyst conclusion does not exceed the evidence.