ITIS 3110 LAB 8 System Audit System Audit

ITIS 3110 LAB 8 System Audit

System Audit • Scenario • You’ve inherited a workstation/server/? ? • What is it • What does it do • What has happened on the system • Is it up to date? • Your job is to investigate the system and document it • You are only starting with the user id and password

System Audit • Procedure • Download the mystery OS • Unzip • Start the VM • The VM is VMWare, that is a. vmdk! • Start the VM in Virtual. Box • Do an audit • For this lab you may consult as small teams • Make sure everyone understands every step! • Note in your report who you worked with • Everyone must write their own report • May share data files • Be sure to address all the items in the lab • Lab reports must be individually written

System Audit • Hints: • Use the System Auditing and Hardening lectures • Hints as to where files are • Utilities to use to probe/diagnose • You may take a copy of the VM with you to do analysis later • At a different time in the lab • This VM may be used for the Network Auditing Lab also

Upcoming Labs: • Lab 9 • Network Auditing • 8 GB SD card with Kali Linux • May want a 16 GB for extra storage space • Will need ettercap installed also on Kali • Lab 10 • Wireless on the Pi • Lab 11 • Kerberos and LDAP • Lab 12 • TLS SMTP SPF • Lab 13 • In-lab project time • If not cancelled due to weather • Lab 14 • Project presentations

GET STARTED