In Part 2
of the Active Directory project, we'll bring our lab environment to life by setting up virtual machines for Active Directory, Splunk, and client devices. This section covers installing operating systems, configuring network settings, and preparing the Active Directory domain controller. By the end, our lab will be fully operational and ready for hands-on security and monitoring activities.
- Diagram
Have your network diagram from Part 1 ready. - Virtualization
Install VirtualBox (version 7.0 or above). - System
If using an M1/M2 Mac, consider using cloud providers like Vulture or Microsoft Azure for compatibility.
-
Visit virtualbox.org.
-
Download the installer for your OS and verify the SHA-256 checksum:
- On Windows Open PowerShell in the Downloads folder.
- Run
Get-FileHash .\yourdownloadedfile.iso
and confirm it matches the provided checksum.
-
Install VirtualBox:
- If prompted, install the Microsoft Visual C++ 2019 package dependency.
- Follow on-screen instructions and set default installation options.
-
Download the Windows Media Creation Tool and create a Windows 10 ISO file.
-
In VirtualBox, create a new VM:
- Set a name, choose your storage folder, and upload the Windows 10 ISO file.
- Customize specs based on your system (4GB RAM, 1 CPU).
- Set storage to 50GB.
-
Power on the VM and follow the Windows installation steps:
- Skip entering a product key.
- Choose Windows 10 Pro, agree to the terms, and select a Custom Install.
- Windows should now install.
-
Visit kali.org, select the VirtualBox option under downloads.
-
Verify whether your system is 32-bit or 64-bit:
- On Windows, check System Information under Control Panel.
-
Download and extract Kali Linux VM files:
- Use 7-Zip to extract files.
- Import the
.vbox
file into VirtualBox. - Log in with default credentials:
- Username: kali
- Password: kali
- Go to the Microsoft Evaluation Center and download the Windows Server 2022 ISO.
- In VirtualBox, create a new VM:
- Name the VM, select a storage folder, and upload the ISO.
- For hardware:
- Set RAM to 4GB for installation (adjust later if needed).
- Set Storage to 50GB.
- Install Windows Server:
- Select Windows Server 2022 Standard Edition with Desktop Experience.
- Create a strong administrator password when prompted.
- Visit ubuntu.com and download Ubuntu Server 22.04.
- In VirtualBox, create a new VM:
- Set the name as
Splunk Server
, and select the ISO file. - For hardware, allocate 8GB RAM and 100GB storage.
- Set the name as
- Install Ubuntu Server:
- Follow the on-screen instructions for a guided install.
- Set up a username and password.
- Skip SSH setup if you prefer.
-
Log into Ubuntu with the username and password you created.
-
Run the following commands to update:
sudo apt-get update sudo apt-get upgrade -y
By completing Part 2, you now have the following setup
- VirtualBox
Installed and configured. - Virtual Machines
Created for Windows 10, Kali Linux, Windows Server 2022, and Ubuntu Server. - Operating Systems
Installed and set up on each VM.
In Part 3, we will install and configure Sysmon and Splunk on the Windows target machine and server to enable telemetry collection and log forwarding.