Posts

Setting up Active Directory enviroment.

Image
  Setting up server and users: First I set up a user VM running Windows 10 Enterprise edition in VirtualBox. I powered on the machine and set up Windows with all default settings. Next I set up a VM for the server, using Windows 2022 server eval. I then set up a network for both of the VMS and connected them to it For the user account, I selected domain join Then named the account user1, followed by a password on the next screen.        Setting up host:     I logged on to the server and grabbed the IP address I then logged onto the User1 VM and added the servers IP address as the DNS for User1. I then put googles DNS as the secondary DNS server. Active Directory setup: On the dashboard of the server manager, on the server, I selected add roles and features. Then I continued down to server roles and selected Active Directory Domain Services, using all default settings. After installation complete an exclamation point pops up in the top right corner. I c...

Using Nessus to find and fix vulnerabilities on VM.

Image
  Today I'm going over how I set up Azure Sentinel to show failed access attempts to a virtual machine, and where they are coming from. Step 1: Install software. I started out by downloadingy/installing the following software: -VMware Download VMware Workstation Player | VMware -Nessus  Nessus Essentials Vulnerability Scanner | Tenable® Next I downloaded the windows 10 installation media and created a .iso file through it. ( Download Windows 10 (microsoft.com) Step 2: Create a Virtual Machine.   I opened VMware and selected "Create a New Virtual Machine." I then selected the .iso file that i created from the windows 10 installation media. I used default options until i got to the hardware section. I selected customize hardware. Under "Network Adapter" I selected "Bridged." I then closed the "Customize Hardware" tab, and selected "Finish" on the wizard. Next I started the VM and set up windows on it, using the free trial and de...

Setting up Azure Sentinel to identify VM threats.

Image
Today I'm going over how I set up Azure Sentinel to show failed access attempts to a virtual machine, and where they are coming from. Step 1: Log into Azure and create a virtual machine. After logging in to Azure and setting up an account, I s elected "Create a resource." I selected "create" under virtual machine. I Filled out all the required information, then selected "Review + create," at the bottom of the screen. I then selected the Networking tab. Under "NIC network security group," selected "Advanced." Then, under "Configure network security group" selected "Create new." I deleted any inbound rules and a new rule, by selecting "+ Add an inbound rule." Allowing all traffic from the internet, so the VM is quickly discoverable. I select the "Review + create" tab at the top, Confirmed the information, then selected "Create." Step 2: Create a Log Analytics workspace. I u...