In this video we're going to take a look and install CSI Linux.
Now, CSI Linux is a Linux distro that's based off of Buntu, and it's a really remarkable operating
system.
It's super easy to use and extraordinarily powerful, and it's built for things like investigations
and open source intelligence in mind.
Now, in previous courses, I have recommended using things like Trace Labs, Linux also Buscador,
and even building your own ozone machine, or even using a windows host, our windows virtual machine
rather.
And these are all absolutely viable options to do.
However, if you're just starting out, you're just kind of getting into Osint.
I do recommend using a Linux host, and CSI Linux is really, really great operating system.
The other ones are also really good.
But in this course we're going to focus on CSI Linux because it has some really incredible tools to
use.
Now, if we head over to CSI Linux.com, it'll take this page here and we can download CSI Linux.
They have Academy that you can go to and start learning more about open source intelligence and suicide
Linux and that, which is pretty cool.
But for now we're going to go ahead and just download the operating system.
So click on download CSI Linux and it will take us to the download page.
And we'll see some options there.
Let's take a look.
Okay.
So if we go here we can see there is current version is 2020 3.2.
Now if there is a newer version I always recommend going with the new version.
And if you're watching the course and there is a newer version, don't worry about it.
As long as it's a non-major release, which if it's a say, 2020 3.3 or 2020 3.4 probably won't have
a major changes and you won't have to worry about it.
Go ahead and install it and you should be able to go to the courses normal.
If there is a major change, I will go through and I'll rerecord the video.
Now, if we see this virtual appliance for virtual box, we see, uh, VMware, we see KVM.
If you decide to use an alternative for one of these, go ahead and download one of these.
We also see there's a bootable, uh, external drive version, which is great.
That's really cool.
And there's this, uh, portable apps version, which we'll take a look at in the bonus section for
now, what you want to focus on is go to VirtualBox and click Direct Download.
Now I went ahead and went download the file already to save some time.
It's going to be a seven zip archive.
So you want to make sure you have seven zip installed and you want to uncompress it.
And for the windows host I buy, right click on here I can see seven zip open.
I can click open and then you can do extract.
And I already went ahead and did that to save some time.
And we can see the folder here.
We can see two VirtualBox files here.
So let's close this out.
We open our virtual machine and again you can see a couple virtual machines in here.
We can go to machine and we can do add.
And once we go add we want to go browse to wherever the folder is mines my downloads and click on this
I'm going to click on this VirtualBox file here.
Click open and we can see it appear here.
Now, if we want to take a look, we can go to settings here.
And we can start clicking through and taking a look what this virtual machine looks like.
So we can see it's a ubuntu 64 bit.
Its type is Linux.
We can go to system.
We can see the base memory here.
Now this is really cool about virtual machines I can give this as much memory.
Or as little memory as I want based on how much I have free on my host machine.
So I have a lot of memory on my host machine, so I'm going to leave it at eight gigs.
If you have less than eight gigs free of memory to use, you definitely want to bump that down.
Also for processors.
I can bump this up or bump it down.
Uh, display.
We can change the display settings, network settings, audio settings.
So again this operates as its own machine.
But it's using some of the resources from host machines.
So that's really cool to be able to use this okay I'm going to click okay here.
And another thing I want to show you is snapshots.
So if I right click on this CSI Linux here, I could clone it.
I can create shortcuts.
Um, I can again go to the settings.
Also, the other thing I could do is I could do snapshot.
So you see this little camera icon here with a plus.
I could do click that and it does a snapshot.
Now a snapshot is essentially taking a image of that operating system.
So this is fresh out of the box CSI Linux.
So I can type in something like OEM.
And I could put down a snapshot description which I do recommend doing is uh.
Fresh install.
Okay.
And I can click okay.
So what happens is.
If I go in my CSI Linux, I'm going through, I install a bunch of programs, I do my investigation,
I have all sorts of stuff on there, and I'm done.
I'm done with investigation.
I don't need to go back to it.
When I start a new investigation, I always recommend starting with a clean machine.
So if I want to go back to a pristine state, which you absolutely should do for each new investigation,
don't reuse an old machine that has a bunch of stuff on there.
It could be contaminated.
You don't want to contaminate your evidence.
I can go back up to this OEM version, my snapshot, and I can click restore.
In all restore me to that point.
I also could do additional snapshots.
I could do snapshot two.
I could do snapshot three.
And these are all different states.
Again, if I'm if I need to take several snapshots for whatever reason, I can have all these different
states that I could use.
And if I want to get rid of one, I'd say I want to get rid of snapshot three.
I just click on that and click delete and delete.
And it's gone.
Okay.
So let's go ahead and let's go back into our CSI Linux and let's start it up I'm going to just click
start here.
And we're going to fire this up here and take a quick look at CSI Linux.
Okay, that's going to power up.
I'm going to pause the well, actually, I'll let it run here because it shouldn't take too long to
start up here.
I'm just going to close this dialog box by clicking this red x here.
Make things a little bit easier.
Okay.
And we can see our machine starting up here.
Okay.
So we have the login here.
What is the login for CSI Linux?
It is CSI.
And that's going to start up our machine and let us in.
So again, this machine thinks it's his own computer.
As if I took this machine, I took this operating system.
I loaded it in here.
Now the screen looked a little funny.
So I'm going to just minimize it.
I'm going to expand it out here.
And now it's full screen.
Now if you use windows or a mac it should be fairly familiar.
So up in here this Linux button I can click this.
And it comes up with all these wonderful programs here.
And they did a great job breaking out these things here.
So CSI Linux tools we can start a case gateway uh secure comms encryption Austin online investigations.
Again this has some really awesome pre-installed tools.
We're not going to use all these tools.
Um, I do recommend kind of playing around with these different tools because again.
You're going to use different tools for different situations.
Some tools aren't going to always work every time, and you might need to use something else.
And even though this has a huge amounts amount of tools here, a lot of great stuff here, we're going
to go ahead and install some other stuff after the fact.
But again this is kind of showing you how, you know, basically a walk through of CSI Linux and not
only open source intelligence stuff here.
We also have things like Wireshark for network scanning, Hunchly, which is a cool program, but you're
going to have to pay for it.
We have um, Onionshare, which allows us to share files over the Tor network anonymously.
Keepassxc, which I highly recommend.
We're we're going to be talking about it later.
Autopsy is a cool program if you're doing computer forensic.
Uh ghidra is if you're going to do reverse engineering on malware or viruses, that's by the NSA.
We're not going to be touching those.
But again, CSI Linux has a lot of very cool tools in here.
Other things you might be interested in is this question mark.
You can click here to see what your IP address is, and you can click on here for your network volume
settings.
Lock your computer.
Restart it.
Shut down.
Sleep.
Another important one is going to be the terminal which is this little black box here.
And with Linux the terminal is going to be really, really important.
And we'll go over some basic, um, terminal commands in the next video.
But I do want did just want to give you a quick look at CSC Linux.
And we'll we're definitely going to be diving much, much deeper into this in the later videos.
So either I could click shut down here and I'll shut down in 30s if I don't do anything.
Another cool thing about virtual machines is I can click this x here, okay?
And I could save the machine state, I could turn it off, I could restore it to the my snapshot.
If I do save machine state, it's going to save it in.
However, whatever state I have, if I'm working on something and I need to shut it down for whatever
reason, I got to go somewhere.
I have a meeting I have to run to.
I could click save state and it's.
And when I start back up, it's going to start up right where I left it.
Even if I turn off my computer or reboot my computer, it's going to come back up in that exact state
it was left in.
So really cool.
Okay, that was installing CSI Linux along with a very short tour.
And we're going to be getting into much more of this in the next upcoming videos.
Thank you for watching.
I'll see you in the next video.