Lab 0 could take some time.
So make sure you read these instructions thoroughly.
Make sure you follow all of the steps.
What is extremely important is that you
prepare your virtual machine for the proper settings
before you license Cellebrite Physical Analyzer.
In a second, I'm going to show you my screen
and exactly what I mean, and we're
going to walk through some of these licensing steps together.
The first step is to download your ISO.
From there, make sure you launch your VM
and that you can log into it.
Start following Lab 0.2, the exact instructions.
You will see that we will license some tools immediately
before we use them.
Some tools don't require licensing at all.
And some tools in this class are strictly a bonus.
If you don't prefer to use them, you don't have to.
So just make sure you are leveraging as much as you can
of Lab 0 and the electronic workbook or the printed PDFs.
They are there to assist you.
In your virtual machine, before you start anything with Lab 0
with licensing, the first thing I want you to do
is to check your settings.
I'm going to go into Virtual Machine and Settings.
And in here, Processors and Memory,
I want to make sure that I have enough memory allocated
to my VM.
You can see here that I have a lot of memory on mine.
Make sure you meet the course requirements.
If you are trying to run on 4 gigs of memory,
processing is going to take quite a long time.
Now, you have the luxury because you're on-demand.
You could kick off the processing of a lab,
go make some coffee, go do something else,
and come back to it.
But just make sure you enable these settings per Lab 0
before you click on this Physical Analyzer button.
We are now going to walk through Lab 0 with licensing.
The first step is to license celebrate Physical Analyzer.
Please follow these instructions precisely.
If you do not follow them to the methods I'm showing you,
to the methods that are shown in Lab 0,
you are going to have to do this again,
and you're going to have to use the troubleshooting
section of Lab 0.
What we want to do here-- you have a software license.
Unless you are a proud owner of a Physical Analyzer license,
and then you could simply plug in your dongle and stop.
But for the rest of us, we want to select Software.
Now, this is very important.
You cannot change anything here.
Do not change your computer ID.
All you have to do is click Generate under Generate C2V.
We're going to generate that file.
And you're going to see, it wants to download.
I'm going to save mine into my Downloads directory
and select Save.
Do not click on Box 2 at all.
That is not for us.
If we go out to our SANS portal, if we go into--
and you want to log in as yourself.
So go to sans.org.
And I'm going to go to Account Dashboard.
Once you are logged in, you're going to see a few things here.
So we do have SANS on-demand.
That's where this course is located.
We need to go into My Labs.
Here, you can see Forensics 585.
Click on the plus.
And it tells you, you have to license some of your labs.
It's telling you, please license Physical Analyzer
by loading your C2V below.
It also tells you, make sure you follow Lab 0 exactly.
So I'm going to click on Cellebrite licensing tools.
And all you have to do is browse to that C2V
file you just downloaded.
So I'm going to browse to my Downloads directory.
And notice, I'm doing all of this inside of my VM.
Maybe mine did not download to--
there it is.
Mine's in my Documents.
And I click Request License.
Now, be patient, take your hands away
from the keyboard at this point, and let SANS do its job.
What SANS is doing is, it's reaching out
to the Cellebrite servers to create
a unique license for you.
This license is unique to this system,
meaning you cannot put it on different systems.
It will return a license.zip, and you can select Save File.
Now, what we have to do is go back into Physical Analyzer.
Remember, we're skipping step 2.
We're going to click Load License File.
And you get the green box.
If you do not get the green check and Generate C2V,
it's because you never clicked Generate.
If you do not get the green box and Load License,
it's because something went wrong during My Labs.
Check your internet connection and reach out
to your SME at this point.
You will also notice, in the lab access,
it says if you have issues, email tedbeatty@sans.org and CC
hmihalik@sans.org.
Together, we will help you get this licensed.
I'm going to click Next.
Now, at this point, Physical Analyzer is going to launch.
You will notice that Physical Analyzer, AXIOM, Inspector,
some of the tools we use in this class
take a moment to launch so you may just want to minimize it
when you're done with the lab so it doesn't
take so long to open again.
Once Physical Analyzer opens, what I'd like for you to all
do-- and you don't have to do this if you're open
and everything's good.
I do Show License Details.
And you should see that your license
is valid for 120 days, which is the length
of this on-demand course.
If you get an extension, please reach out--
or if you need an extension and you
need to extend this Cellebrite license,
please reach out to Ted and myself
and say that you extended the course and you
need to get an extension for Physical Analyzer.
When this is ready, the second step is to license AXIOM.
You could do it at this point, or you could wait.
Select All license AXIOM.
If you go into AXIOM process--
and where my screen is going to look slightly different
than yours, you will find these licenses
in your virtual machine in your SANS portal.
So if I go back to my SANS portal, get out of My Labs.
And go under SANS On Demand, and then find
your correct on-demand class, Forensics 585,
you will see all of your licenses
on the right-hand side of the screen.
They do not exist yet for me because this
is being recorded for you in the studio right now.
So what I have temporarily done is,
I put licenses on my desktop that I created for this class.
And I'm going to grab those now.
Once AXIOM launches, you want to grab that entire license.
It says Begin License, End License.
It's a very long license file.
Make sure you capture all of.
That and this part is extremely important.
These tools update so frequently.
We do not recommend updating if you want your workbook
to match exactly what you see on the screen.
If you are one of those people that you're like,
you know what?
I want to compare what is in the workbook
and what Heather and Lee wrote to what is currently released,
great.
But just know, the online SME cannot help you if something
does not work the way it was intended to if you choose
to update.
So I'm going to choose Not Now.
You can always update after class.
What I recommend is, keep the VM as is, and then
as you're prepping for the certification
or as you're practicing more, update the tools
and see how things differ when an update is in play.
Sometimes, an update works.
Sometimes, it creates bugs.
And you will see that in this class.
I'm going to go to Help, Licensing-- and this
is super important.
You must choose Trial.
If you choose anything else, you may
have to uninstall AXIOM, reach out to your SME,
and reinstall it.
So choose Trial License.
And I'm going to paste the license
key where it says License Key.
Let me re-grab mine.
So copy from your begin to the end.
And you will see, it doesn't look like anything happened.
But if you look very, very closely at the screen
where it says License Key, you'll see Key Activated.
There is no excitement behind it.
It should be good for 90 days.
If your license expires, depending
on when you start the course, reach out to your online SME
and they will provide you with a new activation code.
The way this works is, when you sign up for Forensics 585
your on-demand access is provided.
A license key is put into that portal.
So if you wait three months to start the course,
your license may be expired.
Reach out to your SME a new one will be placed in there.
It's very easy.
AXIOM is now ready for use, Physical Analyzer
is now ready for use.
And the rest of the tools are extremely easy to license,
and most of them are bonus.