OK, so in the West, make sure we set up our Windows 10 workstation or point, and then I suggested
that you set up your second workstation before you move on.
So you can see I actually did that here once and I've got up.
And don't worry, if you're not clear on which VM is what and subsequent lessons, we're actually going
to install B.G., which is this internal tool that will display the hostname IP is a bunch of other
system details to you.
We're going to push it out from our domain control, the vehicle policy.
That's gonna be really fun.
But at this point, I just want to make sure that you've got your PC setup, right.
So all we did was we went ahead and, you know, we set the hostname, we set the power settings, we
installed VMware tools, we update the systems and we installed the audit policy configuration, the
Parachilna logging, Zisman and Splunk.
Right.
And that's where we're at right now.
We didn't really follow through all the way with the universal forwarder because we don't have the IP
set up yet, but we're taking baby steps.
And one thing I did want to show you that I did is if you go to the power.
Plan.
One thing I did was I just turned off the display to never.
The way the display never shows like the screensaver, it never turns off, it's always available.
But now when you're at this point, when you're at this point, we're ready to install our windows there,
20 domain controller.
And this is going to be great because it's going to be running.
DNS is going to be running DCPI and it's going to be amazing.
It's going to be really realistic and we need to get this started.
So let me show you where you can go to get it.
And the press control ought to escape the VM.
And I'm going to go to Microsoft dot com again and dash us.
Since I'm in the U.S. and the eval center, I'm going to get started and I'm going to go to Windows
Server 2013.
All right, then, once you get here, it's the signal to be all right, just make sure you get the
ISO click, continue, put in your information and then it's going to basically permit you to download
the bits.
So continue and I speak English.
I'm going to click download, it's going to download the ICEL, so let's go do that and we'll come back
once this ICEL finishes downloading.
I'll see you guys in a little bit.
Right.
So we've got the ISO downloaded and now we're going to set up the VM.
You just go to file your virtual machine.
Typical.
And you don't want to install the disk image, you want to just say, I will install the operating system
later, this parts really important because if you try to install the disc image, you're going to run
into errors.
I know it's counterintuitive, but trust me, I've done this so many times.
This is the way to go.
So we click next.
We make sure that Microsoft Windows and set the Windows 1719.
From the list.
But next, the DC four domain controller is my path, of course, make sure you have enough space in
a location receiving your VM because this can take up a significant amount of space you might want to
use like an external drive or something like that.
And afterward, as a single file with 60 gigs of space.
Everything else is good here, some sniglet fish.
Then I'm going to drag the DC in to the private group here, and then I'm just going to say at a virtual
machine.
And then I pointed to the ISO.
No, I know that's a little bit backwards, but that's the way you got to do it for some reason, I
really don't know why.
All right, so we should be good there, let's power this Veum up.
Click in presenter.
Due to the I so I'm going to press control ought to skip the B.M. to close this bottom bar, then I'm
going to click back into the VM to get back into the installation.
All right.
Sweet.
So this is pretty much the way we did it for Windows 10, right?
We're just going to click next install.
Now we're going to install a desktop experience, if this were a production environment, you probably
want to use the standard of evaluation or the data center evaluation or you wouldn't use the evaluation,
use the license copy.
But the point here is that these non desktop experience versions have a smaller attack surface because
you don't have as many components to patch and therefore there's less to maintain as less downtime,
the less interruption an impact to business.
And of course, there's less targets for an attacker to exploit.
So, you know, obviously the best practice here is to make sure that you are installing a non GUI version
in a production environment.
At least that's my advice.
But since we want to learn about, you know, hack and want to learn about, you know, all the techniques
that attackers are using, it's going to make more sense for us in our learning environment to use a
desktop experience.
So next.
All right, sweet license terms.
Yep, yep, yep, custom and I'm going to quit next year, this drive right here, which is on our Veum,
our guest, not our host.
All right, very cool, so we're off to the races.
Let's let this thing go and then once it finishes, we will come back and set up the local administrator
account for the server.
I'll see you guys in a little bit.
All right.
Very cool.
So we went ahead and complete the installation process.
It took about five minutes.
My IBM, that's going to go ahead and type in an intentionally weak administrator, local administrator
password for this account.
Why?
Because we're learning, right?
We want to make it easy for us to exploit these systems.
And if you want to make it more realistic, you could Google RockYou text, OK, just Google RockYou
that text and a GitHub and you can just select a password from inside that list and out of here and
then you can later try to crack it open into all that later.
So don't let's not dig into that.
Let's not go that route too early.
OK, we still have a lot to go and we want to make sure that you guys have a solid cyber range setup
before we start hacking and breaking things.
All right.
So I got my password in here.
I'm going to click finish.
Finalize my settings, all right, sweet, so since press control delete to unlock, but since we're
in a van, that's not going to work because it will lock my post-box.
I need to press control alt insert.
And then I can log in with the passive I just created.
All right, doing what I love my piece to be discovered by other pieces.
Sure, we can do that.
You know, once we get this thing set up and we have it updated, we're actually going to change it
over from being using that.
See, look, if I go here and I saw this from using the network adapter, not to using a host on the
network, which means that the connection will be restricted to my host, the Internet will be severed.
And don't worry, it's going to make sense a little bit later because we're actually going to set up
our open sense firewall to basically function as a gateway.
Are we going to send all of our outbound traffic through it on the way out?
So don't worry.
I know I'm talking ahead.
There's a lot that we have in store, but let's just leave this video right here for now.
I'm going I'm just going to click on local server and we're going to leave it here.
And then in the next lecture, we're just going to set it up.
So we're going to change the hostname.
We're going to, you know, install the updates.
We'll do everything we did for PC one and hopefully that you already different PC to.
And then from there, we can continue our configuration.
We want to set this machine up as a domain controller, as a DNS server, and also as a server for all
of our lab machines and a bunch of other stuff.
So I'll see you guys in the next lecture and dig into one configuration for our windows 1719 to make
it seem a bit like.