OK, so the last lecture we finished is setting up callisthenics, our attack machine, and now we're
going to set up our targets, Windows 10 targets.
So if we go to Microsoft Dotcom and then we go to the evil center, we can start the evaluation.
What do we want?
We want Windows 10.
All I did, I went to Microsoft dot com for such nwc for slash evil center.
I clicked.
It started like like Windows.
And then I'm going to choose Windows 10 Enterprise.
All right.
So we get a 90 day eval.
Plenty of time for Elad and we can always be with it if the eval expires.
Click continue putting your name.
So let's put my company data in here and you can just make up this information really.
I mean, obviously try to be accurate, but we don't have a company then, you know, it's kind of hard
to figure out what to put here.
So what am I?
I am the business executive.
That's funny.
I'd say researcher, I'm guess because I don't want spam click continue 64 bit and make sure we get
our language.
OK, so we'll let this download and when it finishes, we'll continue setting up our VM.
All right, so our download finished.
Let's go ahead and run it over to the anwer workstation.
And the first thing I'm going to do is shut down this VM because we don't need a consuming resources
since we're not using it.
All right, cool.
Now, what we can do is we go to file virtual machine next, but we don't point to the disk.
Instead, we say I will install the operating system later.
If you try to install it from the ISO first, it will fail.
So we're going to say next we're going to pick Microsoft Windows 10 64 bit, actually, next.
I'm just going to name this PC one.
Next story is a single file to improve performance next, and I believe everything else looks pretty
good, let's just double check processes and keep it at not for now.
We will change this later.
Everything else looks good.
Close finish.
And we will now create a new folder.
So we'll say right.
Click your folder.
Let's just start this with modern ethical hacking.
Who put public in there?
And then what we'll do is we'll create another subfolder.
Private Irag that under public what we got to make sure it's actually inside of this folder doesn't
look like it is, let's drag it, drag private into modern ethical hacking and then put it under public.
There we go.
Drag PC into private.
Now we're looking good.
So now we just need to make sure we pointed to the ISO.
So I'm going to say that a virtual machine settings go to the key point to the back of the ISO.
Looking good.
Click OK, and it's part of the baby.
So I press any key to boot to the VM control all to escape.
And then I'm going to kill Kelly Axia Kelly when.
All right.
So we'll go through the setup process and we'll just keep all the defaults except the license.
Click next, click the custom install next with a partition and we're off to the races, so we will
come back once this finishes.
Oh, right.
So now we're going to finish this set up.
So we're going to select our region, click into the VM, OK?
They're keyboard use for me at least I don't need a second keyboard, so skip that.
Oh, right.
So now it's going to ask us to sign in.
We're actually not going to use our Microsoft account.
We're going to click one domain, join instead.
And then we're just going to set up the local admin account, so for me, in my case, I'm going to
put Varnay.
You should, of course, put your name.
Right.
I'm just going to put in a default password,
and for the purposes of this lab, I am using an intentionally weak password because we may want to
crack it or exploit it later.
Right.
I mean, the whole purpose of this lab is to learn you don't want to make it something too complicated.
So I'm just entering it like random answers to these security questions, like next.
And then I'm going to opt out of all of the intrusive privacy settings.
Right, cancel no to all those click accept and then we will not use Cortana.
And then we'll let this process complete, so I will come back once this finishes.
It shouldn't take longer than a few minutes.
All right.
I'll see you guys in a little bit.
All right.
So that finished.
I'm going to go ahead and click the start button in the bottom left corner.
I'm just going to type environment variables.
That I'm going to go to the first tab and change the computer name.
To pick one.
Oh, sweet.
That's good, that's installed the Immortal's, we will restart later control alt to exit the VM.
I was going to go to the install the tools, then I'm going to click back into the VM.
Open up, explorer.
And find my DVD, which is right here.
And right, so we're just going to basically next next finish will use the complete installation while
that works, will change the power settings so that the computer doesn't fall asleep on us to use power
plan.
We'll change it to ultimate performance, that should be good because, you know, one of the problems
I've had with these labs is your voice will just go to sleep on you and super annoying because then
you have to wiggle the mouse and, you know, it's really nice when everything just works.
And so that's it for that.
I'm going to actually not restart yet
because we want to install some updates.
And of course, you have maximum flexibility on how you do this, in my case, for my cyber range,
I want it to be as realistic as possible.
So I'm going to update these targets.
If you want.
You can leave them updated.
That way, you know, you can run your metabolite attacks against them.
You can pivot.
You couldn't hack.
It'll be a lot easier.
But, you know, I'm trying to make this realistic.
So that's why I'm updating these these hosts.
So we're going to get these updates run.
This is probably going to take a while.
So I will let this run.
And then once it finishes, I'll come back here and we'll wrap things up.
All right.
So it looks like we finally finished with our updates to see if we can log in.
There anymore updates.
So it looks like we might be up to date completely.
This is pretty cool.
The change, our resolution to a nicer resolution here.
1920 by 10, 80 looks pretty good.
We adjust the screen.
I should go back to updates just to confirm I'm kind of paranoid.
I just want to make sure that my machine is completely up to date.
It is.
All right.
Sweet.
So in the next election, what we're going to do is we're going to install Seaspan.
And Sismondo is really cool.
It's a tool that basically logs all the process creation that gives you the full command line.
In all the arguments past those processes, it hashes all the processes that tells you, you know,
which drivers in which deals are loaded up.
It's very robust and it's free.
So we're going to set that up and this will be our first step and our endpoint instrumentation phase.
Right.
So we're going to install this mine.
We're going to make sure perishable logging is installed and subsequent lessons.
And we're going to really you know, we're going to install this plug forwarder.
It's going to be really, really awesome.
And I cannot wait for you to jump into this journey.
OK, guys.
So I will see in the next lecture.
All right.
Bye.