In this updated video, we're going to download and install CSI Linux.
Now this again is a updated video.
Some students were having some problems with the CSI website.
Since the website did change from the last time I recorded the video.
So if you have any problems, if you have any questions, always feel free to reach out.
And if it's something that's like this where the page changed and it may need a video update, I'm more
than happy to, you know, update these videos for that purpose.
So let's take a look.
So I'm over on the CSI website.
So CSI Linux.com.
And I'll take you to this page here.
Now the first one that comes up is CSI Linux Virtual Appliance.
And this is a VirtualBox appliance.
And there's two versions here.
There's one that has a seven zip file with the extension pack, which I normally download.
However, I just downloaded this to test it again and I did have problems with this.
So if you do download this one you want to have seven zip and compress it and install it.
And it's normally okay.
But again I, I don't know if it was a problem with the download site or what, but I did have problems,
so I went ahead and downloaded this one here.
The second option here.
Now this is a much larger file because it's not compressed and it's about 20.5 gigs.
So again I did download ahead of time because it saves a whole lot of time.
Um, I don't think you want to sit here while I downloaded 20.5 gig file.
So the I have my VirtualBox already installed.
So once that's downloaded, I'm just going to double click this here.
And.
My VirtualBox comes up here.
So I'm going to leave everything default.
You always could change the folder location here by clicking that little folder there and changing it.
You could change the settings too if you want.
I'm going to leave it default, so click finish and we can see it's importing the appliance here.
Now I'm going to pause the video.
That's going to take a couple minutes.
Okay.
So once CSI is imported gets 100% we can close this dialog box.
And we can either on this we can click start.
Or we could double click this.
Now one of the cool things about using VirtualBox or VMware is we can take snapshots.
Well VMware you can't take snapshots in the free version.
You can on the on the paid version.
But a snapshot essentially lets us take a snapshot of the operating system.
So if I click on take I could put down base image for example.
And uh.
I could put a description which is really useful and I can click okay.
Now what this allows me to do is I can go through I can install 100 programs, I can make all sorts
of configuration changes, and I can go through an investigation.
And once I'm done, I can simply go back to whatever one I want.
And I could do restore right there.
And I could take a bunch of snapshots.
I could take another snapshot.
Now what I would what I would suggest is if you have the hard drive space, create a snapshot of your
base image and then take a snapshot of your system after you make whatever changes you need to add bookmarks,
configuration changes, additional software, etc. and then take a snapshot.
Don't do any investigations yet, just take a snapshot.
Now the reason for this is every time you do an investigation, you should be on a clean virtual machine.
And what will happen is say for example, this snapshot.
Once my clean operating system, I go through an investigation, I'm done.
I should be on the current state.
I go back to snapshot one.
I do restore it, restores it back to that clean state again.
So every time I do an investigation, I have a completely clean computer.
Instead of doing, say, not doing this, doing investigation, doing another investigation, doing
another investigation, then you have a corrupt operating system, essentially because you may have
done this or that, gone to certain sites that may have compromised the Compromised system before.
Not a good idea.
Just have a clean snapshot every time you do a new investigation.
The other thing is, if something happens, I go to a, say, hacking website and it's it's full of
malware and malicious stuff and it blows up my virtual machine.
Well, instead of going through and redoing my virtual machine again, I could simply again go back
to that snapshot and click restore before it happened.
Pretty cool.
Now, if I have snapshots I don't want like this one here, I can click on delete and it will delete
that snapshot.
Okay.
So again to start this I'm just going to click on start here.
And you can see powering up the VM.
Now we'll let this start up here.
Doesn't take very long.
Okay.
Almost there.
Okay.
And now we have our login screen.
I'm just going to close this dialog box by clicking this red x here.
And the login is CSI.
In whatever CSI has for a password is going to be CSI.
There you go in here and we can see all sorts of things here.
Linux tools, encryption, secure KMS, dark web, uh, incident reports, settings, accessories.
So it works much like a regular any other computer.
And up in here we can see what our IP address is.
And over here is restart and shutdown.
So this was our install CSI Linux.
Thank you so much for watching.
I'll see you in the next video.