Link | Description |
---|---|
Active Directory Splunk Lab | Hands-on experience with the setup of four VMs, configuring their OS and Networks, Security measures with Splunk Server for log analysis, and Sysmon for endpoint monitoring. Crowbar for simulating brute force attacks on Windows Server active directory users, and analyzing the attack with Splunk. Atomic Red Team (ART) and MITRE ATT&CK for testing. |
avulman / active-directory-project Goto Github PK
View Code? Open in Web Editor NEWThe lab involves setting up a virtualized environment with Oracle VM VirtualBox, creating Windows 10, Kali Linux, Windows Server, and Ubuntu Server VMs. Tools like Splunk, Sysmon, and Crowbar are used for security testing. Participants configure networks, join Windows to Active Directory, and practice PowerShell scripting.