This repo was created for the gracious folks at Wild West Hackin' Fest, who picked us up, dusted us off and said "here's another chance guys, go get 'em!" ...and who gave us an opportunity to run a rapid fire workshop about lab building.
Anyway, here's the Defensive Origins crew builds labs!
Time to deploy: Approximately 30-60 minutes
Authenticate to your Azure portal:
| 🌎 URL | Browser on Students Local System |
|---|
https://portal.azure.comThen, goto the hosted ARM template resource page on a new browser tab:.
| 🌎 URL | Browser on Students Local System |
|---|
https://www.doazlab.comAbout half way down the page, click the Deploy to Azure button.
 |
|---|
Select your subscription, resource group, and location. Document this location, it will be needed later in class.
 |
|---|
The default VM size is B2s, which are burstable, low cost, and efficient VMs. You can bump this up to larger should you choose.
 |
|---|
Your next configuration option is the network ranges allowed to access this lab's public IP addresses. We will investigate some Internet-based threats later and recommend leaving this wide open to the configured all zeroes (0.0.0.0/0) range.
 |
|---|
One more click will bring you to the validation check. After a moment, you can click on Create to start the build process for your ADD Lab Environment.
 |
|---|
The process takes between 25 and 30 minutes to fully deploy. The deployment confirmation shown next is indicative of a successful build.
 |
|---|
The Outputs option in the left navigation tree includes the access details you will need for SSH and RDP access into the lab environment. Document these IP addresses, you will need them later to access your lab infrastructure.
 |
|---|
A visual aid for your lab deployment is shown in the next image.
 |
|---|
When logging into the Windows system, use the following credentials.
doazlab\doadmin DOLabAdmin1!When logging into the Linux system, use the following credentials.
doadmin DOLabAdmin1!
The screenshot in this section demonstrates the output values from the course ARM template deployemnt.
You will need all of these at various points throughout the course material. You should keep them handy in a notes document or similar quick-reference.
⇨ Step Complete, Go to the next step!
Establish RDP to the workstation and domain controller (Linux with Remmina)
From Linux, you can use the Remmina remote desktop (RDP) client software.
⚠ Note Be sure to include the domain on the initial RDP connections. doazlab\doadmin DOLabAdmin1!Establish an RDP connection to the IP address of your lab's domain controller. You will be prompted to accept a certificate that should match DC01.doazlab.com.
Establish an RDP connection to the IP address of your lab's workstation. You will be prompted to accept a certificate that should match WS05.doazlab.com.
The domain controller will prompt you to accept the discovery settings. Your lab is isolated and our guidance is to click Yes. The course authors do not believe choosing No will affect any of the course content.
The first login to the workstation will require approximately ten minutes to fully build the user profile and desktop environment.
⇨ Step Complete, Go to the next step!
Establish RDP connections to the workstation and domain controller (Windows terminal services client)
The following screenshot includes an example mstsc connection string. Your IP address will differ.
Be sure to include the domain on the initial RDP connections.
doazlab\doadmin DOLabAdmin1!
Establish an RDP connection to the IP address of your lab's domain controller. You will be prompted to accept a certificate that should match DC01.doazlab.com.
Establish an RDP connection to the IP address of your lab's workstation. You will be prompted to accept a certificate that should match WS05.doazlab.com.
The domain controller will prompt you to accept the discovery settings. Your lab is isolated and our guidance is to click Yes. The course authors do not believe choosing No will affect any of the course content.
The first login to the workstation will require approximately ten minutes to fully build the user profile and desktop environment. The desktop background includes bginfo.exe as a desktop background for quick reference as to which system you have accessed.
⇨ Step Complete, Go to the next step!
🐧 Bash Input Linux Host: Nux01 ssh doadmin@'YOUR-PUB-C2-IP'doadmin DOLabAdmin1!
Did you know you can SSH directly from Windows 10 without additional installation, packages, or software? You can, straight from PowerShell.
🪟 PowerShell Input ssh doadmin@'YOUR-PUB-C2-IP'
⇨ Step Complete, Go to the next step!
We packed a bunch of tools onto your Linux system during the build process. So, there's a start, but here's some more quick hitters.