Changes to Cyberlab Login and Instructions for CSEC650 Lab 2 Assembled by Cyberlab TAs Carl Pupa and Jeff Karlan

Access the Cloud:

Connect to UMUC’s Cyberlab VPN using Cisco Anyconnect Login to UMUC Virtual Computing Lab: https://csvcl.vcl.local/cloud/org/csec650/

Delete old VM and Create new VM:

If you still have an old VM in your cloud, right click on the VM and select "delete" from the popup menu. Answer “yes” at the prompt.

Select “Add vApp from Catalog” Select CSEC650_Lab2 > Select “Next” button Change “Name” field to: yourlastname_Lab02 Select “Finish” button Wait for VM image to finish “Creating”

Start your VM and log in:

When the process has changed from “Creating” to “Stopped” select the green play button When the process displays “Running” single click the thumbnail of the VM

Login to the Ubuntu VM using the following credentials: Username: cseclabuser Password: cseclabuser

Updates to Lab Steps:

****Skip steps 1-4 of CSEC 650 Lab Write-up****

Go to step 5 of CSEC 650 Lab Write-up and continue

****Step 7 is modified****

Instead of step 7: use root terminal :

Applications > Forensics & IR> Root Terminal Root terminal password: cseclabuser

Go to step 8 and continue following

After step 14: When running autopsy Firefox will fail display the local site. In Firefox select file > work offline. Make sure the option is unchecked. Click try again in Firefox.

In step 24, the hash value doesn't have to match the one given in the Request for Analysis document, which is part of the lab design.

Continue to step 25 and complete the rest of the steps.