Hi and welcome back to our environment. Preparation
section video number 2 called
the configuring OST operating system. In
this video. We will go through the basic configuration and basic installation
of needed software to start with our
osint investigation. Actually, we will also
do some of the tweaks on the Virtual Machine level, but
only to make our virtual experience better.
If you remember, we did a power off in the last video, so
we will need to start our virtual
machine.
And now before we can test, does the
shared folder work?
We have to add our user to the correct.
group 4, permissions, as you can see,
we can see the shared folder with the host machine,
but we do not have the
Correct. Permissions.
Co.
In the applications, go to terminal.
And type sudo add user.
Osint, which is a user and
add it to the V box.
SF group.
Typing sudo password.
Try it again.
And if it still doesn't work with the permissions, you
have to restart the virtual machine we did that and
I will check it again.
Our shared folder.
As you can see, here is our test.
You can copy it to
your desktop and vice versa.
Now, we will personalize our machine a little bit.
So to personalize, go to the settings, simply
right-click, the desktop, choose
settings.
First, go to the notification notifications option
and disable the
lock screen at vacations, not to bother you.
Also go to the privacy.
And then turn off, too.
And then on the screen, lock option.
Turn off the automatic screen lock.
Turn off the lock screen of suspend option.
And just to be sure the blank screen
delay, a period of inactivity, after which the screen
will go blank. Put to set it
to never.
Of course, this is all optional and
now go back.
^ options.
Now, here with the power saving on
the black screen, put to never.
And on suspended, power button, automatic suspend, when
on battery power, turn it off.
Because you wouldn't like for your virtual machine to
suspend itself while you conduct some investigation or
you run some tool script.
Now, we'll go back to our desktop.
And see the dock on the left.
you can customize the dock and remove
unnecessary things like
For instance, Thunderbird mail right, click
it remove four favorites.
Also Rhythm box, right? Click remove Port
from favorites, then
LibreOffice.
And for last, we didn't eject eject that
virtual.
Actually, we did not eject
the guest additions CD image, but
we can do it right now, right? Click and
choose eject.
Actually two things I like to have in my Dock and
they are not here. They are the
terminal and the software updater simply
go to show up locations, go
to terminal.
Right-click it, add to favorites.
To add to the dock. Also do
that for the software.
Updater right, click add to favorites.
Okay.
And you can see them on the dark now.
Regarding the software updater in that way. You can
check for updates on a weekly basis that said, I
will mention the snapshot feature now because
updates are things that change the
configuration and have a great potential to break something
in your virtual machine. Your operating system may
be recalled from before but we mentioned
the snapshot feature of virtual box where you can
use that feature to save your current state of operating system
and invert to that state at any
time.
Later, let me show you.
Let's shut down our virtual machine completely.
Power off.
Okay, so powered off.
Now as you can see when our
virtual machine is selected, we
can press on the plus sign. Take
snapshot.
Of course, we can you can put an enter a name or
some note. I usually put Mom,
which stands for main osint machine.
And I first for a description. I
usually put was the state of the machine.
Optionally. If you ever want to remove a snapshot Tipsy, simply
use the icon with a red X.
For delete, this is the current state.
This will remove data files to eliminate wasted space. But
you cannot restore to that image. Once they're removed. It
will not impact the current machine State. Many
users remove all the unused snapshots after
creating newer stable machines.
Okay. Now that our machine is turned off. We will do some management configuration.
I have mentioned before that. I like to
access my Ubuntu via SSH from
the host machine that require some
configuration of the virtual machine settings. And on
the operating system. Let's do the virtualbox configuration
first.
Go to the virtualbox settings
virtual machines settings.
The network tab.
Advanced.
Then click on port forwarding.
Here you will enter the virtual machines IP
address and the and your local hosts
IP address to properly forward, the port you wish to
access on the operating system Ubuntu.
Choose the plus sign.
So the protocol is TCP
host IP is
127.0.0.1. And
that is the Local Host. IP addressed of my
host machine, the local loopback mechanism may
be used to run a network service on a host without requiring
a physical network interface or
without making the service accessible from the Network's the
computer.
Maybe connected to that IP addresses 127
Point dot 0,
dot 0 dot one after
that the host Port which I'll put down
to to to to.
It can be only it can be anything in the TCP range
from 12 65535.
I
will put 2222 since the
SSH port number is 22 so I
can remember it more easily.
Did the great guest IP address that the IP address of the
Ubuntu. And since I know that the default
IP address of nat virtualbox guest
IP and that's 10.0
dot-to-dot 15.
And lastly, I
have to put the guest Port, that's 22 since we
want to access the SSH, port
on the, on our Ubuntu.
You can easily check the guest IP on the operating system
itself. Through graphical interface or The Terminal. I
encourage you to check that out by yourself, press.
Ok.
Again, okay. Okay. The settings are
saved and now let's fire up
our Ubuntu.
Machine.
Okay, we turned our machine on and we have to
login.
We have to go to the terminal.
To check the SSH service on the virtual machine. Actually, we
have to install configure it to work so
we can even access it from The Host.
So to install SSH the execute
this command sudo apt
update.
Your sudo password.
After that sudo apt-get, install openssh.
- server.
Press enter.
Yes, we want to continue to install it.
Okay, is it can see?
Once installation is completed. The SSH service. Will start automatically.
You can verify that a
sage is running by typing. Just
like clear our screen a little bit by
typing.
Pseudo system.
C TL.
Status ACH.
As you can see.
The service is loaded and active, it's running.
This output should tell you that the service is running
in enabled to start on system boot
on the next boot.
Also a bunch of ships with firewall configuration tool
called ufw, if the
firewall is enabled on your system. Make sure to open the
SSH Port so we will open it Anyway. By
typing sudo, you have W, allow
SSH.
Okay, great. That's it. You can now connect
your Ubuntu system via SSH from your host
machine. Let's try it out now.
This is the terminal.
This is a terminal on my host machine, my MacBook. So
To connect to my Ubuntu virtual
machine via SSH. I have to type SSH
- be as
- port to
22.
User osint. The local
IP address 127.0.0.1 and
enter. Yes. I want
to continue connecting.
There is a RSA key fingerprint. Yes.
And the ocean password, that's
my virtual machine password.
As you can see, I'm connected via SSH on
my Ubuntu.
Okay, now to get back to our Ubuntu graphical,
desktop environment. Actually, we're going to make this
window a little bigger. Okay.
The next step is the browser. Firefox is
recommended as the privacy of are browser. Actually,
we Firefox, you have the ability to configure a lot of
the privacy settings because Firefox natively respects,
your privacy and security more than other browsers.
We're going to fire up, Firefox. Web browser.
Some of the configurations and settings changes
can be done in the Firefox preferences here
on the right.
But also there is another method with
the about column config option.
So just enter about
column config in the address bar where
you traditionally type the website link you wish to visit.
And press enter.
You will receive a warning about making changes
within this area. But you can
proceed, if you promise that, you will be safe and
that you accept the risk.
Do not get too much into the advanced configuration of the browser
security and privacy settings. I would like to share two
resources that help me in configuring my Firefox actually.
One tutorial actually
guide. I found it on Reddit and
the link is
Here.
As you can see, this is a comprehensive tutorial and
I encourage you to check it out. The other one is
on the site called restore privacy.com.
Actually, just Google for the
term. Firefox privacy guide or configuration and
you will get a lot of the results on the
subject.
Now, I would like to discuss the biggest benefit of Firefox, which
is the abundance of helpful browser extensions called
add-ons. There are a lot of them out
there and I will mention more about the add-ons as
we go further with the course, but now I
will just like to point out. Some of
them on the must have add-ons. Is
the Firefox multi-account container. Add
on
To get to the add-ons options, on
the right side open menu.
Select add-ons.
And here you can search for them.
As I have mentioned, our first ad on, we
are going to search for it. So
multi- containers.
And search.
So here, Firefox, multi-account containers.
Here is the add-on.
This is a really great add-on. I use it on daily basis, actually.
Right now. I have it in production as I'm recording.
This course, multi-account containers allow allows
you to separate your various types of
browsing without needing to clear your history log in
and out or use multiple browsers.
The tabs can be completely isolated
from each other.
Simply click add to Firefox.
Since it requires your additional permissions, click
add to allow.
And here is the add-on.
You see icon in the upper right corner of
the Firefox browser.
It appears as a three squares and
a plus character click on
it.
Get started.
No, we do not want to sync the containers right now.
And just select the container you want to
open?
These all are pretty fine, but you can edit them. Let's
take the personal one. As
you can see, a new tab with the color.
The personal color has been opened.
This feature is great because tabs, believe it or not talk to each
other. Some travel website, knows you have
Facebook and maybe it will grab some Facebook info about you or
your activity that you weren't even aware of. This
is crucial when doing open source intelligence investigations,
you do not wish to use some service for
which you are already logged into or something. Automatically
your interestig ation stops being
that discreet.
The next must-have add-on is called https
everywhere.
But allow me to show you.
Again, in the search ad on search box.
Here it is.
So, https, everywhere Forces size to give out
their HTTP version of themselves, if
available, of course and if they do not have it, you
get a Big Red Flag Warning about it. HTTP
makes your browsing more secure and
I think that is something on what I have to put an emphasis,
especially in the ostent realm.
While we are here, I'm going to Simply add it Firefox.
Now, I would like to mention a few of the add-ons. I
find useful on a daily basis for Miles investigations, but
I have to say it again. There are a lot of them out there
and you have to figure out what works best for you and
your host investigations. So
look up an add-on, called you
block origin. That is a script blocker. Then
exif viewer for viewing
image metadata.
Then.
The add-on called fire shot for documenting screenshots
of websites.
Then the add-on, keep a sexy browser
add-on, which we
will mention later in the course.
That's an integration of password manager.
Keep a sexy.
Now that we have a working stable a burn to virtual machine ready
for our osint activities. We can proceed with
the studies just a side note. When I
have finished with all the configurations. I have made another
snapshot in virtualbox and I named it
added Firefox just for us to have another
point in time, in which we can go back. If we miss something
up with a bunch of in the next video. We
will cover the note-taking and password part of osint. Believe
it. It may sound simple.
Like taking notes and saving passwords, but
that quickly becomes a rabbit hole. If not careful.
See you in the next video.