Welcome to Cyber Aces Online, Module 1!

A firm understanding of operating

systems is essential to being able to secure or attack one. This module dives in to
Microsoft Windows Operating System.
This training material was originally developed to help students, teachers, and
mentors prepare for the Cyber Aces Online Competition. This module focuses on the
basics of what an operating systems is as well as the two predominant OS's, Windows
and Linux. This session is part of Module 1, Introduction to Operating Systems. This
module is split into two sections, Linux and Windows. In this session, we will begin
our examination of Windows.
The three modules of Cyber Aces Online are Operating Systems, Networking, and
System Administration.
For more information about the Cyber Aces program, please visit the Cyber Aces
website at https://CyberAces.org/.
This module focuses on the basics of what an operating systems is as well as the two
predominant OS's, Windows and Linux. In this session we will provide a walkthrough
of the installation a Windows VM using VMware Fusion (OS X/Mac) and VMware
Player (Windows & Linux). These sessions include hands-on labs, but before we
begin those labs we need to install the operating systems used in those labs. We will
be using VMware to virtualize these operating systems. You can use other
virtualization technologies if you like, but instruction for their setup and use are not
included in this training.
Windows refers to a series of operating systems developed by Microsoft Corporation.
Since its initial release in 1985, Windows has become the de facto operating system
for personal computers in both home and business applications. Windows operating
systems also exist for servers, mobile devices, and embedded devices. Recent, well-
known releases for personal computers include Windows 7, 8, and 8.1, and Windows
10. Chances are that you are already running Windows and are familiar with how to
use it, as the operating system is installed by default on most manufacturer-produced
computers.
Microsoft, Windows and the Windows logo are registered trademarks or trademarks of
Microsoft Corporation in the United States and/or other countries.
The Windows line of operating systems takes many forms and is not confined to
solely personal computers. For instance, the Windows Server branch is produced to
provide services such as Web, Database, Email, File and Print services and more. The
IoT edition is produced for low-cost, lightly powered devices and IoT (Internet of
Things) scenarios Each edition is designed to address the needs of and provide
effective support for its respective target market; this may even take the form of an
entirely new kernel being developed with special specifications.
Windows 10 is the currently-supported Workstation versions of the operating system.
The "workstation" family of OSes has been further broken down to target business
customers and classes of home consumers. Editions of Windows 10 include Home,
Pro, Enterprise, and Education.
This course will focus on the use of Windows 10 Enterprise. Some of the security
features and tools are not available on home versions of Windows. In a corporate
enterprise, Windows Server and Active Directory introduce several additional security
features that we will not discuss here such as Group Policies and Trust Models.
We will have hands-on exercises throughout the training. The hands-on training is
intended to compliment the topics learned throughout this training. You are highly
encouraged to follow along so that you can get the most out of this training.
We will be using an evaluation version of Windows 10 Enterprise. This is the same
software used my the vast majority of organizations. Since this is an evaluation
version, it will expire after 90 days. It is fully functional for the 90 days, but at the end
of that time you will no longer be able to use the VM. If you need to use the OS after
that date, simply follow these directions again to build a new VM with a new 90 days.
NOTE: Microsoft Windows is owned and licensed by Microsoft, any changes to the
availability of the ISO or changes to the licensing and or evaluation period is
completely up to Microsoft and is out of control of Cyber Aces. We will keep you
informed of any changes as promptly as possible.
There are four steps in this exercise. We will first download the software (.ISO file).
This step can take a long time and will require a download of over 4GB. Make sure
you set aside enough time to complete this download.
Next, we'll create the VM, then install Microsoft Windows 10 Enterprise. We will
wrap up this exercise by patching the operating system. This step can also take a long
time.
Due to licensing restrictions, Cyber Aces and SANS do not have permission to directly
provide you with an existing and pre-built Windows VM. You will be creating the
virtual machine yourselves by downloading and installing an evaluation copy of
Windows 8.1 Professional inside of a virtual machine.
Begin by browsing to https://www.microsoft.com/en-us/evalcenter/evaluate-windows-10-
enterprise. Select "ISO - Enterprise" from the menu near the top, and then click
"Continue". Provide your contact information on the following screen and click
"Continue". Select the 32 or 64 bit radio button, select your desired language from
the dropdown menu, and click "Download".
The following steps are for installation on Windows. MacOS users, please skip ahead
to the MacOS installation instructions.
The instructions for creating a VM in VMware Player are significantly different from
the instructions for creating a VM in VMware Fusion.
Attention Mac Users: The instructions for installation via VMware Fusion are very
different from the instructions using VMware Player. Please skip ahead to the page
title "Create the VM with Fusion"
If you are using VMware Player in Windows or Linux, continue to the next page.
If you are using another virtualization product beside VMware Player or VMware
Fusion you will need to create the VM now. Instructions for creation of the VM using
other products is not included in this training as there are simply too many variations.
Start VMware Player and click on the "Create a New Virtual Machine" button. This
will allow us to configure the options for our new Windows 10 VM.
Select the "Installer disc image file (iso)" option, click the "Browse" button, and select
the .ISO file that you just downloaded.
On the next configuration page, Select "Windows 10 Enterprise" from the dropdown.
Enter your name in the "Full Name" field, and enter a password and confirmation
password (if desired). Click Next.
Click Yes on the next screen to confirm you want to proceed without entering a
license key.
On the next configuration page, select "Microsoft Windows" as the Guest operating
system and "Windows 10" as the operating system Version. If you are using an older
version of Player or Workstation, you may not have "Windows 10" as a version
option. In this case, choose the newest client version of Windows available in the
dropdown (Windows 7, Window 8). Click Next.
Name the Virtual Machine "Cyber Aces Windows 10" and choose a location that you
will remember and be able to easily access. Click Next.
After you click "Finish" you have completed the creation of the VM. You can now
begin installing Windows. Skip ahead to the the page titled "Installing Windows".
The following steps are for installation on MacOS.
Follow these steps to create a new Virtual machine in Fusion on MacOS.
1. Click the +
2. Click "New…"
3. Click "Install from disc or image"
4. Click "Continue"
5. Click "Use another disc or disc image…"
6. Select the .iso file you just downloaded
7. Click Open
8. Click "Continue"
9. Uncheck "Use Easy Install"
10. Click "Continue"
11. Click "Continue" (again)
12. Click "Customize Settings"
13. Name the file (default name is fine) and click "Save"
14. Click "Hard Disk (SCSI)
15. Change the "Disk size" to "20.00" GB
16. Click "Apply"
17. Close the window
Now that our virtual machine is configured with the expected operating system and
virtual hardware, we are ready to begin installing Windows. Click on the play button
at the top labeled "Start Up" to boot the VM.
Next, we will move on to installing Windows on the virtual machine we just
configured.
The following steps are for installation on MacOS.
Hitting the play button powers on our virtual machine. Much like a physical machine,
it begins going through a boot sequence beginning with our mounted ISO file as if it
were a CD-ROM inserted into the computer.
If everything was configured correctly, Windows setup will begin.
The installations of Windows 10 is very simple. The first prompt will ask you to
confirm the version of the operating system being installed. Click "Next" to continue.
In some versions of VMWare, the installer may report a licensing error (shown above)
if a virtual floppy drive device is configured. Proceed to the following slide if you
receive this error. Otherwise, proceed to the slide titled "XXX" to continue the
installation process.
Press the "Ctrl" and "Alt" keys simultaneously to release your mouse cursor from the
VM. Navigate to the Player menu and select Removable Devices > Floppy >
Disconnect from the Player menu.
Press the "Ctrl" and "Alt" keys simultaneously to release your mouse cursor from the
VM. Navigate to the Player menu and select Removable Devices > Floppy >
Disconnect from the Player menu.
Press the "Ctrl" and "Alt" keys simultaneously to release your mouse cursor from the
VM. Navigate to the Player menu and select Removable Devices > Floppy >
Disconnect from the Player menu.
The installations of Windows 10 is very simple. The first prompt will ask you the
language, currency, and keyboard type, the default options are usually acceptable
here.
Next, you will be prompted to "Install Now", click the button to continue.
Before installation can proceed you need to agree to the End User License Agreement
(EULA) offered by Microsoft. If you agree click the checkbox and click "Next".
The next prompt will ask you what type of installation you want. The “Custom Install”
is the option to select.
The installer will then prompt you asking where you want to install the operating
system, there is only one option. Click “Next”.
Windows will then begin the installation. Depending on the speed of your system this
could take a while, but it usually doesn’t take too long.
After the installation is complete you will need to finalize the installation by
answering a few questions. You will first need to select the Region. After selecting the
Region, select your desired keyboard layout.
Microsoft will ask you to sign in with a Microsoft account. You do not have to do this.
This training does not require that you use a Microsoft account, so click the “Domain
join instead” option and click "Next". If you would like to use an existing account (or a
new one) you can do this, but it is not required for the exercises.
The installer will ask you for information about a new account that will be used to log
in to the system. Create an account named “student” and click "Next".
Select a good password that you will remember. If you forget this password Cyber
Aces will not be able to help you retrieve it. If you need to, add a password hint that
will help you remember this password. Click "Next". Re-enter your password on the
next screen and click "Next" to continue.
Select a security question and provide the answer. Be careful to choose questions and
answers only you can know. Anyone with access to your computer can use these
questions and answers to reset your password and log into your computer. If you
forget the answers to these questions, Cyber Aces will not be able to help you
retrieve them. Click "Next" to proceed after answering each question.
Select no on this slide to decline synchronization across devices. Click "Next" to
proceed.
Select Decline on this slide to decline setting up the Windows 10 assistant, Cortana.
By default, Microsoft enables settings with privacy implications. Set each option as
follows:
Online speech recognition - Set to "No"
Location - Set to "No"
Find my device - Set to "No"
Diagnostic data - Set to "Basic"
Inking & typing - Set to "No"
Tailored Experiences - Set to "No"
Advertising ID - Set to "No"
Click "Accept" to continue.
Congratulations, you have installed Windows 10 in your VM!
This VM will be used throughout the training, so keep it handy.
In the next session we will discuss updating and patching Windows.