MBYX config

[MBYX]

This laptop is a dual boot win10(VMWARE) / ubuntu(VIRTUALBOX) system i use for research (i avoid personal data stored on it).

• Currently im favouring the Ubuntu - Virtualbox side and have it mostly setup to what i would like.
• Ill look to finish out the win10 - VMware build, as time permits.

does anyone have suggestions on a fake DNS tool to trick malware ?

 

[Ink]

This laptop is a dual boot Windows 10(VMWARE) / ubuntu(VIRTUALBOX) system i use for research (i avoid personal data stored on it).

Could you clarify your setup:

You dual boot both Windows 10 and Ubuntu under different VM software, but no mention of which Linux distro runs as your primary OS?

 

[MBYX]

Could you clarify your setup:

You dual boot both Windows 10 and Ubuntu under different VM software, but no mention of which Linux distro runs as your primary OS?

The Host operating systems are
windows 10
Ubuntu
I have various VMS under each host system. The Ubuntu (Vbox) side having Kali, Secuirty Onion, Remnux, Win7, Win10 and a few other VM's.
I have the Kali VM setup as a transparent proxy between NAT & Internal network to capture traffic in wireshark etc.
Wanted to put in a SIEM like OSSIM but was limited by the laptops DDR2 ram

I also need to fix up Cuckoo, it turns out a lot of the optional features should actually be required features to get meaningful results.

My plan is to use the Windows side to look at Linux targeting malware and use the Linux side to look at Unknown or Windows targeting malware.

Does anyone have experience at memory dump analysis? (VOLATLITY). I could use some mentoring at a later point.

 

[Ink]

Stating Linux as your OS is very vague, so I would change it to Ubuntu - if that is your most used OS.

Do you have another computer or laptop, that you use for non-forensics use (ie. Internet, Emails, Office-ware etc)?

 

[MBYX]

Sure no problem and yes, separate system is used for non-forensics, personal work.

 

[MBYX]

cuckoo up and running

 

[Ink]

As this system is used for testing, I can only suggest to take Caution.

 

[MBYX]

working well .. set off some SPORA