Cybersecurity Tip: Build A Basic Home Lab (1/3)

[@adapureddi]

I must say this is all time one of the most important video for beginners.

[@MyDFIR]

Thanks! I was worried about this being too beginner but I remembered we all had to start somewhere!

[@RobertJohnson-lb3qz]

Are SBC systems ever a good idea? Or is a virtual environment enough?

[@victormokut]

absolutely!

[@Miracle995]

Watched just one video and couldn't stop myself from liking and subscribing. I must say u know the pain of a beginner very well. Hoping to get more lab based videos in future. Thanks a ton!!!

[@MyDFIR]

Thank you!! You’ll love the projects I have on the channel!

[@weniweedeewiki.6237]

That smirk at 0.36 got me laughing ,,,,,🤣🤣🤣

[@MyDFIR]

😂 don’t execute malware on domain controllers!!!

[@rupushibangladesh3495]

I am a beginner in cybersecurity field. This is very helpful for the beginner I think.

[@MyDFIR]

Awesome! Happy to help

[@techhoppy]

Great video! You eluded to proper configuration of your virtual machines. I'm surprised you didn't mention about setting up a separate isolated local network for the lab so that, whatever you're doing, doesn't escape the VM network. Might be a good idea for a second deep dive video. :)

[@MyDFIR]

Haha good job catching that! That was actually on purpose😝 I didn't want to make the video super long and you guessed it, I'll be creating a deep dive video on properly configuring the VM for malware analysis which will include setting up a separate local network!

[@jw9410]

awesome catch!

[@datag1199]

Fantastic walkthrough. I wish we had more walkthroughs like this for true beginners. So many get discouraged or feel overwhelmed when the KZbinr expects viewers to just "know" how to do something. Not always the case. Thanks again. Subscribed

[@MyDFIR]

Thanks! I appreciate that. ❤️ feel free to take a stab at the projects on my channel when you have some time, should be a fun experience!

[@NessHypegaming]

love your videos! actually giving beginners into cyber things to try and get experience with and things we can put into a CV.

[@MyDFIR]

Happy to hear that! That is the plan, create videos to help people get into cybersecurity. I am glad my content is doing just that. Thanks❤️

[@jw9410]

I finally downloaded both virtual machines thanks to you. You are awesome!! Where do I send the money? lol I am very excited to begin the cybersecurity journey with you. I applied for some entry level cybersecurity jobs, but I know I won't get it because I don't have hands on experience. Because of you I am feeling like I am getting that hands on exposure to cybersecurity. Thank you!

[@MyDFIR]

Haha thanks for the support! I am excited for you and good luck on your job hunt - Hopefully my videos can provide you with guidance on where/how to get started.

[@joshuaspeshock4636]

Always great content! Definitely one of the best cybersecurity KZbinrs! Looking forward to more content! Amazing job!

[@MyDFIR]

Thanks for your support and kind words! ❤️

[@garyhalsey7693]

Stumbled across this video today. I have Sec+ & PenTest+ and am hoping that by watching your videos, I can learn to be proficient in using what I have learned! New subscriber!! Looking for to your future videos!!

[@MyDFIR]

Wonderful! Great job on obtaining your Sec+ & Pentest+ 🙌

[@LinuxEnjoyer]

Addition for 0:55 If you use Linux and your processor supports hardware virtualization, you can use Qemu-KVM + Virtmanager. Alternatively you can also run Qubes OS which is essentially a Xen hypervisor to run Linuxes

[@MyDFIR]

Amazing suggestion! Thank you for that ❤️

[@ayobamiowolade9702]

Hello brother, you deserve my appreciation for this video... May the FORCE always be with you..

[@MyDFIR]

Thank you so much 😀

[@zy7236]

Nice video! Can you make a video on how to network in cybersecurity for an entry level position in Canada? Like what forum or group community you can visit. Thanks.

[@MyDFIR]

Thanks! I actually have a video here, not sure if this is what you're expecting! kzbin.info/www/bejne/bKfCi6aAmdObhdk

[@zy7236]

@@MyDFIR Do you have a discord group?

[@FilmPeak]

Great video, I would like to know though how to configure the VM for sandboxing.

[@MyDFIR]

Sure thing! I’ll create a video on that but one quick & dirty way is make sure your virtual machine has no network connectivity by disabling the vm network card by selecting “Not Attached” - That should keep you safe for *most* malware if you planned on analyzing those. Do note, there are “VM-aware” & “sandbox-escape” malware out there so analyze at your own risk!

[@KishorKumar-re2rs]

4:22 that kali logo and that wording😂😂😂😂😂😂🔥

[@MyDFIR]

😂

[@davidlam9952]

"Host is Toast" gave me a good chuckle, thanks

[@MyDFIR]

😂😂😂

[@ruslanbedoev9264]

Please explain, Is SOC job is doable as entry level position? And what are some entry level position to get skipping the help desk ?

[@MyDFIR]

It can be but if you do skip the helpdesk just make sure you have some IT knowledge. I’ve created a video of entry level roles on my channel

[@liltoelika5234]

this was extremely informative and easy to understand, thanks bro bro.

[@MyDFIR]

Happy to help! Thanks for watching ❤️

[@sahanamanjunath2775]

sir im beginner to cyber security im having windows 11 so am i supposed to install image of windows10 has u suggested in video or download windows11

[@MyDFIR]

You can try it with 11

[@sahanamanjunath2775]

@@MyDFIR i tried and i got the error message as system doesnt support so can i still use windows 10 in windows11 system

[@Mar.3-v]

can you do this on macOS?

[@MyDFIR]

On a ARM Mac there will be some issues/challenges with virtualization unless you use something like parallels. Thus, I would suggest you use the cloud as an alternative. If you’re using an Intel Mac, you’ll be fine.

[@jainudeenahamedulla4959]

Very useful for beginners. Thanks a lot..

[@MyDFIR]

You are welcome!

[@ricp]

Great video, thanks!

[@MyDFIR]

You're welcome!

[@Dahlah.FightMe]

Nice Sir :D

[@MyDFIR]

Thanks 🙂

[@mypassportpicsux]

Welp, there goes my weekend. 😂 Thanks for the vid!! Appreciate the content!

[@MyDFIR]

Haha! Hopefully you’ll have fun building this one, definitely a great way to get started. After that, it will be entirely up to your imagination on what else you can achieve and accomplish. I’ll be here if you have any questions!

[@DubThaDetailer]

Glad I stumbled across your channel. I love your enthusiasm, you sound genuine in your efforts to want to help others become SOC analysts. Thank you for the good content.

[@MyDFIR]

Thanks for the kind words ❤️ I certainly do want to help those trying to transition / get started!

[@chengbiz]

This is a great video.... for next video may I suggest, you show us how to run both virtual machine Window & Kali and simulate attacks (Blue & Red team simulation)

[@MyDFIR]

Love it! Adding that to my to do videos. Thanks for the suggestion ❤️

[@shellz831]

@@MyDFIR Can you recommend where from reputable sources we can download tightly-secured Sandbox? I want to start learning malware analysis and have setup VMs with Kali, SANS SIFT Workstation and other distros. I only have one computer, so I dont want any virus leaking out the VMs.

[@sumantajana9865]

Yes

[@RoonishNiroula]

When I tried to create a snapshot it gave me an error for some reason: VM Name: kali-linux-2024.2-virtualbox-amd64 Snapshot Name: Baseline Could not open the medium 'C VD: error VERR_FILE_NOT_FOUND opening image file 'C Result Code: E_FAIL (0X80004005) Component: MediumWrap Interface: IMedium {ad47ad09-787b-44ab-b343-a082a3f2dfb1} Plz help, Thank you!

[@MyDFIR]

What troubleshooting have you done so far?

[@user-yh1ix5dl7o]

I had an issue bro.. While istalling windows in V.M.... I had getting like.. "Windows can't be installed on drive 0 partiton" Is there any solution...

[@MyDFIR]

You can try to add another hard drive for your VM and try again

[@geerliglecluse5297]

1 small correction: you don't need a valid licence to install Windows 10. I have several times used the Microsoft media creation tool on an inactivated Windows 10 machine to create a Windows 10 iso and managed to install Windows 10 on about 40 other PCs without incident. The limitations of an inactivated Windows 10 version are very minor.

[@MyDFIR]

Thanks for the correction! ❤️ That is good news, utilize the media creation tool to your heart’s content!

[@ibrahimYODA-qk1ng]

One of the realest blue teamer out here no BS only good stuffs. Mucho gracias 🙏🏿

[@HAPPYHAPPY-hh4hw]

i downloaded sysmon v15 as i couldnot find sysmon v14. So i found no .xml file for sysmon in github where i stopped moving forward in the video. could you please help me to solve in this. For kind notice, i didn't any downaloadable link in the video discription.

[@lololololololol444]

Insane value as usual

[@uzi4181]

How can we add this project to our portfolio?

[@sampreethiy8951]

Your videos are toooo goood !!!! 🥺😭could you please suggest me network configurations for my VM ,(Virtual Box) thought of doing pdf embedded javascript malware analysis (file less & file based) , which one would be a better choice? Remnux , FlareVM , or Malwarejail Sandbox. please help me

[@MyDFIR]

They are all good :) I usually use Remnux for static analysis and FlareVM for dynamic

[@lokeshthamineni8900]

after downloading kali 7z file windows security found the file as a trojan n quarantined it.

[@MyDFIR]

Kali does contain tools out the box so I am not surprised. However, do make sure you check its file hash to ensure it is the same found on the official site.

[@josepalacios2344]

Hello, I am an absolute beginner in cybersecurity, having only studied for the A+ certification for two weeks. I am wondering what the minimum requirements are to set up this lab?

[@MyDFIR]

Id say at least 16GB RAM and an Intel/AMD CPU with 100GB hard drive free space.

[@localweirdoco]

when installing win10, it asking if the computer is personal or organization. which should it be? also thanks for these projects. i will be doing all of them

[@MyDFIR]

Personal is fine

[@GIT-COMMS]

Nice video, but you didn't tell us how to properly configure our vm so our "host is toast" 😂 sorry, NOT TOAST 😂 😂 😂

[@MyDFIR]

😂 i do provide some information in part 2 of the lab. At the end of the day, depending on what you’re doing, internal network/host adapter is a pretty good choice

[@AmanKhan-69]

i have 2 questions: 1. some time back i downloaded the kali iso, but for bare metal. then download VMware & ran it on the virtual machine. is there any disadvantage of running the iso made for bare metal on a VM? or could it be run as both? 2. by snapshot do you basically mean a system restore point? and does this restore point remove all the viruses as well? from what i know it just restores the boot drive back in time? what if the malware or whatever infects other drives too?

[@MyDFIR]

Great questions all around. 1. The difference is between the type of hypervisors. Bare metal == Type 1 which will utilize every resources that is available to you. If you have VMWare and and created a virtual machine utilizing that, it would then be Type-2 which will still utilize resources but will be shared with the HOST OS. So the only difference would be resource utilization and if its just labs it shouldn’t matter too much. 2. You can think of snapshot as a system restore point. In other words think of restoring a snapshot as tearing down your virtual machine and restoring it back to the last snapshot you took, so yes it should remove all the viruses ON that virtual machine. If malware infects other drives and those drives are connected on the same network on different machines then that is not a fun day.

[@AmanKhan-69]

@@MyDFIR thank you sir. explained really well. i hope your channel grows big, you're doing good work for people trying to get into the infosec workforce

[@edriceedesign]

Awesome video, super helpful. When trying to make the snapshot, I get an error stating it could not open the medium. VERR_FILE_NOT_FOUND. Would you know how to solve this issue?

[@MyDFIR]

Did you happen to move your VM to another location? Might need to rebuild it if anything

[@edriceedesign]

@@MyDFIR I downloaded virtual box previously and had some VM on there, so i followed your instructions after that process since it’s been a while. By rebuild do you mean I should delete the windows OS VM and make it again, or uninstall and reinstall virtual box as a whole?

[@rakeshneela-nr9yu]

I don't know the issue but the password is not working for me

[@MyDFIR]

Caps lock on?

[@ultravioletiris6241]

Yes this is important, but no its not necessarily going to make you stand out on its own anymore. Most people are aware of labs and projects if they watch any cyber channel on YT.

[@MyDFIR]

Couldn’t agree more! It will make you “stand out” if it is applied, there are a lot of people who say but don’t do if that makes sense and it shows. Labs & Blogs folks!

[@ultravioletiris6241]

@@MyDFIR I agree completely. I think homelabs are necessary for practice, and not using them can make you stand out-in a bad way!

[@Blkbeautee]

I have Windows 11 do I need Windows 10 for the lab?

[@MyDFIR]

Windows 11 should work, I personally haven’t tried yet.

[@lilnickc10]

I keep running into an issue with getting my windows VM installed. It’s caught in a loop that goes back to a blue screen saying “there’s a problem that’s keeping us from getting your PC ready to use but we think an update will help get things working again.”

[@MyDFIR]

I would try rebuilding it and wee if that works.

[@lilnickc10]

@@MyDFIR Yupp that worked. Thanks for the videos!

[@bosten32]

do i have to download powershell

[@MyDFIR]

Your computer should automatically have Powershell installed assuming you’re using a Windows Operating System.

[@ricp]

On 12:06 you mention the importance of configuring the VM correctly as a sandbox environment - do you have a video that covers that? - thx!

[@MyDFIR]

No specific video but make sure your network adapter is set to internal/host only or not attached when executing suspicious files and disconnect any shared folders attached to the VM. Essentially you want to limit connectivity to your home network and PC as much as possible.

[@ricp]

Cool, thanks a lot! @@MyDFIR

[@Javaman92]

Wait.... did you say that I will need a license for the Windows OS? I didn't see anywhere that you used one!

[@MyDFIR]

Apparently you no longer need one. Previously you would be required to have a licensed Windows machine to create an ISO image which is what I was referring to.

[@Javaman92]

@@MyDFIR I was cringing the entire time I was installing Windows in my VB. It took forever compared to all the Linux versions I have installed!

[@MyDFIR]

Gotta love Windows! Haha 😂

[@joshuamutamba9909]

How do you know if the virtual machine is in sandbox mode?

[@zenmoto369]

Man did you send me to the rabbit hole! I’ve watched you video on CS projects and decided to make a simple project with Wazuh, well Wazuh doesn’t support ARM, since I am with a Macbook I bought an old Dell Optiplex 6 core, 16gb. And now using this video to set it up, took a week off work, just to install and setup the Windows and its updates alone 😂 The rest should be quick. Thanks for the well made tutorial, great channel with huge potential!

[@MyDFIR]

Awesome! With Wazuh, you can try and set it up via the cloud if you’re comfortable with that, but now that you have a Windows Machine you should be good to go for any upcoming projects!

[@rialbbe]

I've also used Gnome Boxes and Oracle Virtual Box in my Big Linux OS distro and KDE Neon Plasma from the makers of Smart Plasma (Linux) TV which we called Smart TV. Gnome is so easy to use. Gnome Boxes is so easy for beginners with no experience needed. Even it has no complicated configurations needed too. My episode regarding virtual machines installation and introduction will be in public maybe next week as I always set it and I focus only in GNU/Linux or simply refereed to use Linux. As I use Linux in video & layout editing, lectures, documents, slideshow presentation and so on.

[@MyDFIR]

Love it! The one thing I love about our field or well…IT in general is that there are so many different ways to accomplish the same thing. Thanks for your input ❤️

[@SiefaddeenAyoub]

Hey! I know I am a little late to the party but when I am trying to start the Kali VM after importing it into Virtrial Box nothing opens up, its just keeps saying error VERR_FILE_NOT_FOUND, I got this first VM to open and run normally but can't get Kali to work, any thoughts?

[@MyDFIR]

Hm you might have installed the wrong kali or it may have been corrupted during the download, try downloading it again and be sure to select VirtualBox (if you are using that)

[@WarrenKirkpatrick]

I bought a years sub to parallels, I’m a Mac user so I bought parallels to use windows 11 to get used to it etc, can I use that instead of the other applications mentioned? Don’t want ti waste a yr when I’m only a month into it? And great video. Thank you for uploading this. Made a subscriber out of me.

[@MyDFIR]

Thanks! I personally haven’t used parallels before but it does seem to have the capability to host virtual machines so I would say using parallels is fine

[@CyberDANIC]

Very interesting this could better help understand the attacking side

[@MyDFIR]

Thanks!

[@Puw1ng]

Hey dfir, can i use these videos for my club’s education workshops? We’ll be doing demonstrations physically. But the principles will be from the video. Is that okay?

[@MyDFIR]

Absolutely! Please do, I am happy my videos help.

[@ram_bam]

Would you recommend a laptop or a desktop for a beginner? I currently have an M1 macbook but can't do some of the x86 virtualization stuff on it.

[@MyDFIR]

I would say which ever is cheaper. In my opinion, since I like to move around a lot, I went with a laptop that is capable of hosting multiple virtual machines but I also have a beefy server as well. However, I know some folks are not in the position to do that which goes back to my "which ever is cheaper". An alternative is to use the cloud. I believe you get free credits in Azure (200$) when you first sign up to test and play around. Hope that helps!

[@Marcus-dx6fc]

Amazing man I am studying in college and trying to get ahead, this is extremely helpful thank you for your hard work and consistency!

[@MyDFIR]

Thats awesome to hear! Glad I could help

[@ismayilmammadov8469]

Clear explanation. Valuable video content to get into cyber world. Thank you, buddy.

[@MyDFIR]

Glad it was helpful! Thanks for watching

[@ZeNex74]

great video, i was looking at getting a Pi again or a wyese terminal from work.. but should just do virtual.. ill just have to work out how to make a good sandbox

[@MyDFIR]

I know that feeling of so many options! At the end of the day, can’t go wrong with them

[@MIGDALIAGILTECHNFITNESS]

Thank you I need this so bad . My classmates have had job interviews if they don’t have a home lab they re deny The job . This will help me

[@MyDFIR]

Wonderful, I am happy this will help. Thanks for watching!

[@herbie81lets28]

Thank you …your explanation is very helpful and helpful keep on shining brother your a star

[@MyDFIR]

Thank you for watching ❤️

[@willdavis8314]

Love the video. Just starting my career in cyber security and eager to get started on some home lab projects

[@MyDFIR]

Awesome! Thanks for watching ❤️

[@m.a.smuzeeq]

there are certain things i just found out for the first time even though I've been using it for a while now . Thanks

[@MyDFIR]

Happy to help! Thanks for watching ❤️

[@seaverjackson5109]

Sweet video bro, ima do this when I get home so I can start attacking my other VM for practice.

[@MyDFIR]

Awesome! Best of luck and have fun with it 😄

[@ibrahimYODA-qk1ng]

One of the realest blue teamer out here no BS only good stuffs. Mucho gracias 🙏🏿

[@MyDFIR]

Appreciate that! Thanks for watching 😃

[@victormokut]

All of the three parts are excellent with crystal clear explanations. You are a blessing.

[@MyDFIR]

Glad it was helpful!

[@bertosudu9506]

👍👍👍👍👍👍👍👍👍👍👍👍👍👍👍👍👍👍

[@cyberanalyst]

Where do I find the Windows logging software (Splunk etc,)?

[@MyDFIR]

Great question, you can head over to their site to download Splunk however you will be required to sign up for an account. Ive created a video with step by step walkthrough if you get stuck. Let me know if you have any questions!

[@t.browne290]

Love your energy and this channel. Your host is toast is a classic…lol😂

[@MyDFIR]

Haha thanks for watching!

[@oscarjim3]

Bro this video was informative. I'm currently using Ubuntu Linux distro and planning in getting into the field of SOc Cyber-Sec Analyst. Kali I understand is the standard in this field and used for cyber-security jobs. Thanks again. I downloaded the video to my local computer for future reference.

[@MyDFIR]

Awesome! Glad it helps - Kali is great to use as it has pre-built tools ready to go 😀

[@oscarjim3]

@@MyDFIR so currently I have Ubuntu setup. Can I have virtualization setup with the local computer and have a lab arranged that way?

[@pankajg9348]

Hey, thanks for the valuable content! Can we set up the Windows 10 environment shown in the above video in virtual box on Macs with Apple silicon? Will it run without any issues (because it's not Intel based Mac)? Thanks!

[@MyDFIR]

Unfortunately with Apple silicon you will experience some issues but if you use Parallels, it MIGHT work. As an alternative, you could try using the cloud.

[@pankajg9348]

Thanks for the quick response! Do you have any tutorial on how to use the cloud for this purpose?@@MyDFIR

[@jefinshaji1989]

I tried installing kali linux on Virtual Box. But When I boot the OS, I get a warning "spectre v2 mitigation leaves cpu vulnerable to retbleed attacks, data leaks possible". Is this a serious issue.

[@MyDFIR]

Does that happen only for kali? Or does that error happen for any VM? In short, you may experience data leak from a vm to your host. Is it serious? Depends on what you do. If malware analysis perhaps, but if just testing tools, you’ll be fine.

[@jefinshaji1989]

@@MyDFIR The same error came for Debian installation. I am just a beginner. So I will only be doing the basics now. Hope that won't cause a leak.

[@JaiyTimeout]

Awesome video, indeed. I think I finally found someone who can thoroughly explain everything. Will you be doing a video on sandbox and how to properly configure it in VMware?

[@MyDFIR]

Woohoo! Yup part 2 is coming soon stay tuned 👀 thanks for the support

[@cybershark77]

Hey there! Just wanted to drop by and say how much I enjoyed your video. Seriously, it was so informative and well put together. Consider me a new subscriber - I'm hooked! I'm already excited for your next upload. Keep up the great work, looking forward to more! 👌

[@MyDFIR]

That is awesome!! I am super happy I could help. Thank you for subscribing and stay tuned for part 2 👀

[@cvb8181]

Stumbled upon this vid today... Most Def going to follow and subscribe.... and mote

[@MyDFIR]

Awesome! Thanks for the support 🙏

[@cvb8181]

@@MyDFIR How am i to go about being mentored going forward?

[@geecorly7738]

Look like a surefire way to cook my computer.

[@MyDFIR]

😂😂

[@khunjame7]

Can you make this video buy on Mac please

[@MyDFIR]

I personally do not have a Mac yet but once I do, ill look into it. It may be a bit more difficult due to different architecture builds.

[@alig45793]

Thank you bro. Well explained + Wonderful presentation and explanation

[@MyDFIR]

Thank you! More to come :) the next lab will be a treat for sure.

[@Disc0nect]

Can you make a video in which you show us to how to configure the virtual machine so we don't get infected with malwares?

[@MyDFIR]

Yup currently in the works, should be out soon! Stay tuned 😃

[@Disc0nect]

@@MyDFIR Thanks 🙏

[@josephcastro2804]

Great video, thank you sir!

[@MyDFIR]

My pleasure!

[@AceWhitelite]

Quick question, is proxmox suitable for a similar cybersecurity lab? I run a proxmox server that is essentially running nothing at the moment. I wasn't sure if other hypervisors were better for any specific reason

[@MyDFIR]

You can definitely use proxmox! Some prefer it over ESXI, honestly whichever suits you.

[@AceWhitelite]

@@MyDFIR Thank you for the quick response. I’m a few months into my first helpdesk job and they are having me learn cybersecurity to take on that role in the company. I finally had some change laying around to get a proxmox server up and running and I figure i’ll put it to use. Your quick response is going to keep me as a long time watcher!

[@MyDFIR]

That is awesome! Good for you 🙌 feel free to ask questions, ill be happy to try and help.

[@honar1967]

Thanks bro for this video

[@MyDFIR]

Thanks for watching ❤️

[@najata.6058]

Thank you. What a great and informative video. Keep up the good work please.

[@MyDFIR]

Thank you!

[@kokosleon8172]

thanks a million for this

[@MyDFIR]

Thank you for watching ❤️

[@demiadegoke4498]

Do all the downloads including windows installer work on macs?

[@MyDFIR]

Depends if you have M1/2, they tend to not play nice but if you have Intel chips they *should* be ok

[@demiadegoke4498]

Thanks ill give it a try@@MyDFIR

[@6sodal]

Thank you so much, you doing such a great work❤ I love it...

[@MyDFIR]

Thank you for the kind words - I am glad to help!

[@ayindeperouza7703]

Great information thanks

[@MyDFIR]

Glad it was helpful!

[@DJCraigD]

Great video!

[@MyDFIR]

Thanks!

[@cajunphilippine]

Excellent presentation my friend. Thank you

[@MyDFIR]

Thank you ❤️

[@PureAwareness76]

💗 Love your way! 🎉

[@MyDFIR]

Thank you!

[@jp6172]

Great videos, always. Great content

[@MyDFIR]

Thank you for your support ❤️

[@randallhallii7315]

Great stuff!

[@MyDFIR]

Thanks!

[@weedacidegaming199]

You should looksmax

[@constantinelemonis4770]

Much appreciated! As always