In this section, we'll get your workstation ready for the simulation
environment. In this course, we'll be leveraging Kali Linux.
This should be an environment that is somewhat familiar to security
teams. Specifically, we'll leverage Kali 2020.3.0.
If you're having issues with your environment, try switching to this version.
To make things easier,
I'm providing an install script to get you up and
running as quickly as possible.
To avoid any headaches,
I recommend running the script on a fresh install of Kali. First, let's
clone down the repo and cd into the repo's directory.
Alright, let's check out the script.
Okay,
so Recommendations. For the Docker host preferences, we
want to give at least 6GB of memory to the docker daemon.
The containers might not use it,
but Elasticsearch will keel over without this minimum.
Okay,
here we see we're installing Docker, some miscellaneous
dependencies, installing docker‑compose.
Okay,
Set virtual memory for Elasticsearch container (used by Wazuh).
Alright, if you don't set the max_map_count on your host,
Elasticsearch will probably fail.
This step is very important.
Okay, and Allow iptables to be set within the Victim container.
Now this is needed for the custom Wazuh Active Response script.
Looks like we're done.
Let me exit out of bin here.
Now we're going to install the dependencies.
I'm going to pause the video until the installation finishes.
Right on! The installation was successful.