security-testing-vm-setup

Configuring the Microsoft Windows Sandbox & Creating VM of Windows 10 for Security Testing

Objective: Given a scenario, implement host or application security solutions.

Description: A sandbox is an isolated virtual machine: anything run within a sandbox will impact only the virtual machine and not the underlying computer. The Microsoft Windows Sandbox first became available in Windows 10 Version 1903 released in 2019, and additional features have been added with recent Windows 10 updates to provide even more control.

First check if your system has virtualization turned on. right-click the taskbar (at the bottom of the screen) and select Task Manager.
Click the Performance tab.
Under Virtualization, it must say “enabled.” If it says “disabled,” you will need to reboot and enter your BIOS or UEFI and turn on virtualization.
Now enable Windows Sandbox. In the Windows search box on the taskbar, enter Windows Features to open the Windows Features window.
Click the Windows Sandbox check box to turn on this feature.
To launch Windows Sandbox, click Start, and scroll down to Windows Sandbox, and then click Windows Sandbox. A protected virtual machine sandbox that looks like another Windows instance will start, as shown in Figure 1-8.
Explore the settings and default applications that come with the Windows Sandbox.
You can download a program through the Microsoft edge application in Windows Sandbox. (edge is included within Windows Sandbox along with a handful of other Windows applications, including access to OneDrive.) Open edge and go to www.google.com to download and install the google chrome browser in the Windows Sandbox.
After the installation is complete, close the Windows Sandbox.
Now relaunch the Windows Sandbox. What happened to google chrome? Why?
Close all windows.

As Observed and practiced manually in Lab and as unable to download and install Windows Sandbox on Operating system Windows 10, followed the lesson in class and aware of steps and process of downloading and running Windows Sandbox.

Project 1-4: Create a Virtual machine of Windows 10 for Security testing—Part 1

Objective: Given a scenario, implement host or application security solutions.

Description: If you were unable to install the Windows Sandbox in Project 1-3, a different virtual machine can be created in which new applications can be installed or configuration settings changed without affecting the base computer. In a virtual machine environment, the “host” computer runs a “guest” operating system. Security programs and testing can be conducted within this guest operating system without affecting the regular host operating system. In this project, you create a virtual machine using oracle VirtualBox software.

Open a web browser and enter the URL www.virtualbox.org (If you are no longer able to access the site through this web address, use a search engine to search for “oracle VirtualBox download.”)

Click Downloads (or a similar link or button).
Under VirtualBox binaries, select the latest version of VirtualBox to download for your specific host operating system. For example, if you are running Windows, select the version for “Windows hosts.”
Under VirtualBox xxx oracle VM VirtualBox extension Pack, click All supported platforms to download the extension package.

5.Navigate to the folder that contains the downloads and launch the VirtualBox installation program VirtualBox xxx-nnnnn-hhh.exe.

Accept the default configurations from the installation wizard to install the program.

If you are asked “Would you like to install this device software?” on one or more occasions, click Install.

When completed, click Finish to launch VirtualBox.

Now install the VirtualBox extensions. click File and then click Preferences.

Click Extensions.

Click the Add a package icon on the right side of the screen.

Navigate to the folder that contains the extension pack downloaded earlier to select that file. click Open.

Click Install. Follow the necessary steps to complete the default installation.

Remain in VirtualBox for the next project to configure VirtualBox and install the guest operating system.

Project 1-5: Create a Virtual machine of Windows 10 for Security testing—Part 2

Objective: given a scenario, implement host or application security solutions.

Description: After installing VirtualBox, the next step is to create the guest operating system. For this project, Windows 10 will be installed. different options are available for obtaining a copy of Windows:

● A retail version of the software can be purchased. ● If you or your school is a member of the Microsoft azure dev Tools for Teaching program, the operating system software and a license can be downloaded. See your instructor or lab supervisor for more information. ● A 90-day evaluation copy can be downloaded and installed from the Microsoft Technet evaluation center(www.microsoft.com/en-uS/evalcenter/evaluate-windows-10-enterprise).

Obtain the ISO image of Windows 10 using one of the preceding options and save it on the hard drive of the computer.
Launch VirtualBox.
Click New.
In the name: box, enter Windows 10 as the name of the virtual machine.

Be sure that the Type: box displays Microsoft Windows and the Version: box changes to Windows 10 (xx-bit). Click Next.

Under Memory size, accept the recommended size or increase the allocation if you have sufficient RAM on your computer. Click Next.

Under hard disk, accept Create a virtual hard drive now. Click Create.

Under hard drive file type, accept the default VId (VirtualBox disk Image). Click Next.

Under Storage on physical hard drive, accept the default Dynamically allocated. Click Next.

Under File location and size, accept Windows 10. Click Create.
Now the configuration settings for the virtual machine are set. next you will load the Windows 10 ISO image. Click Settings.