Unit 2: Linux/Unix Acquisition 2.3 Activity and Discussion Preparation: Linux Virtual Workstatio...

PREPARATION: LINUX VIRTUAL WORKSTATION

This activity is ungraded

The optional activities in Units 2 and 3 take place in a Linux system environment using SANS SIFT Workstation, a collection of forensic tools.

WINDOWS AND LINUX USERS

Download VMware Workstation Player

Windows and Linux users can download VMware Workstation Player, a free desktop application that lets you run a virtual machine on a Windows or Linux PC.

VMware Workstation Player download

Follow the instructions at the website to install VMware Workstation Player.

Download SANS SIFT Workstation

You have to create an account in order to download the free SANS SIFT Workstation. 

SANS SIFT Workstation download

You have downloaded the SIFT Workstation file SIFT-Workstation.ova

Create your SIFT virtual machine

1. In Workstation Player, select "Player > File > Open".
2. Browse to the SIFT-Workstation.ova file and click "Open".
3. Import the SIFT Virtual machine to your desired location by click "Import".
4. After Workstation Player successfully imports your OVA virtual machine, you can start SANS SIFT Workstation.

• Default username: sansforensics
• Default password: forensics

You can now begin the activities.

MAC USERS

Download VirtualBox

VMware Workstation Player does not support Macintosh. Macintosh users can download VirtualBox to run SANS SIFT workstation.

VirtualBox download

Follow the instructions at the website to install the VirtualBox.

Download SANS SIFT Workstation

Download SANS SIFT Workstation. You have to create an account to download the free software as a .zip file.

SANS SIFT Workstation download

You have downloaded the SIFT Workstation file SIFT-Workstation.ova

Open your SIFT Workstation in VirtualBox

1. In VirtualBox's menu bar, you go to "File -> Import Appliance".
2. Click the "Open appliance..." button to select your OVA file. Then click "Next"

3. The next window will show you the configuration of the current virtual appliance. You can go through the configuration list and make changes. After you are done, click "Import" button.
4. VirtualBox will import the virtual machine.
5. Start SIFT Workstation virtual machine. You will be prompted for a username and password:

• Default username: sansforensics
• Default password: forensics

You can now begin the activities.

If you want to make the virtual machine full-screen:

1. Install the Virtualbox guest utils by entering the command sudo apt-get install virtualbox-guest-utils.
2. When asked if you want to continue, enter y.
3. Reboot your SIFT virtual system.

You should now have significantly better screen with higher resolution.

转载于:https://www.cnblogs.com/sec875/articles/10013484.html