So in the last lecture, we set up our group policy object for the NBG info logging script, I hope
you had a lot of fun with that.
It was really, really fun for me.
And hopefully you learn a lot as well.
Now, we need to get into our e-mails, right.
And so we're going to actually set up a real e-mail, a real like public email account with a domain
we purchased.
And the way I did this is first I purchased a domain on GoDaddy.
Right.
So I just want to go daddy dot com a search for a domain as if it was accessible.
You know, I just typed in carbon bike and I click search.
Right.
And then it came back with the results.
I think it was something like it was like twelve dollars or Karpin Bikes dot com.
You can get that one if you want to, but it was really, really cheap.
And I found a coupon and it was really simple to set up.
But once you get your domain, what you need to do next, set up your email and so you can add the email.
It's an additional cost, but it's not very expensive.
So if you go down to the domains I purchased, you can see I own car and bike and a few others.
But if you click this.
You can see that we have the option to add email, you click, add email.
And then you get a couple of options out.
This could change in the future.
Currently, GoDaddy has these options, right?
So I'm using just the email essentials package.
I think it was yeah.
It was like one ninety nine per user per month.
And I've got five years or so, you know, do the math.
Ten bucks a month.
It may sound kind of steep.
You may not want to do that.
You don't have to do it right.
This is just something I did because I really wanted to understand initial access, especially because
attackers are using this technique.
Right.
They're using T1 five, six, six and all these sub techniques to gain access into environments.
How do I know?
Well, you can see some of the attacker, the attacker groups down here.
Right.
And you can read about in the news.
Right.
This is a common method of breaching an organization.
And so obviously, if you want to defend your organizations against these kinds of attacks, you need
to know how these attacks happen.
You need to know the adversary mindset.
And that's why I strongly suggest you actually, you know, take the plunge and go for the cheap, you
know, email essentials pack.
And once you do that, let me show you what it looks like.
I go to email and office.
And you can see all these accounts I created, right?
I mean, these are each, you know, a dollar ninety nine a month, whatever, but, you know, it's
created all these accounts you should do.
I mean, these are things that you can do.
So you can really get you know, you really can learn how the stuff works.
And so, for example, I can click one of these accounts, a good friend, Randy Moralez, we can click
manage.
And we can delete his account, we can set it up, we can send the email desktop, and there's a bunch
of really, really cool things that we can do here.
So once you have your email accounts set up in GoDaddy, all you need to do is download, you know,
office from within GoDaddy and then install it.
Right.
Just install office on your your workstation and put in the user's email address is going to ask you
for a password.
Put in the password.
That's really it.
So we'll do that real fast and then we'll move on to the next lecture.
OK, so let's flip over toward them and let's install office.
So now we're at Randy Morales's computer.
We've got Outlook ready to be configured.
So I'm just going to pop in Randy's email address, which I can figure out as Randy Tomalis at company
like Dotcom.
And you don't need to click anything here.
You should just be able to click connect and it should take you to a login portal.
And then here you can put in the password.
And I have Google authenticator set up, so I'll just put in the number, so I just had to download
the Google authenticator app on my phone.
I mean, that's really all it is.
Trying to make it realistic.
I mean, it's maybe too much for some of you guys, that's fine.
This is the way I like the role, so and that's the way I've got my set up.
All right.
So while that works, we can flip over to Jacqueline and do the same thing.
But in Jaclyn's password.
OK, it looks like I didn't actually configure Google authenticator for Jacklin, and I probably have
it set for Randy because he's the admin.
Let's go back to Randy and see how he's going.
OK, we're all set.
It's click done and it looks your load.
And then once that happens, we'll come back and we'll send a test email just to make sure everything's
working.
Alright.
So the account was successfully added right there.
And I'm just going to set up a Microsoft mobile app on my phone too, that I clicked on.
Let's wait for this to load and then we will come back or it's OK to send a test email.
So you just came in here.
And by the way, in order to do this, I had to take my machine out of only and change it over to Matt
temporarily.
You can see here we're actually going to get that fixed in the upcoming election because we need to
install the open gateway so we don't have to keep flipflopping the adapters.
But you can see here it worked out just fine.
And I should be able to reply everything, she worked as great earlier, Jacqueline forwarded an invoice
to Randy, which you can probably guess what that is, right?
Obviously, it's malware.
But, you know, we've replicated this entire scenario in our lab.
Right.
I mean, this is all fake.
This is all stuff we made up.
We're going to go into this a little bit more detail a little later.
But that's it for this lecture.
In the next one, we will go into setting up open sets, the router, the default gateway.
And then we're going to start looking at Microsoft Defender, ATP Event Threat Protection and Microsoft
Defender for endpoint.
Great talk zoomed by.