Create a Ubuntu VM in virtualbox.

1. Install Antivirus software, update it, run a scan (ClamAV), report the results

2. Install Anti-rootkit software, run it and report the results

3. Run a Security Audit with Lynis and report the results

Install CSF

1. Get a partner to run an nmap scan, they should get results

2. Block their IP

3. Get them to run another scan, there should be no results

4. Get your partner to run a Hydra brute force attack, check to see if their IP address

gets picked up by lfd and added to the deny list.

Using Security Onion

1. Log in to Security Onion as an Analyst

2. Check the Alerts for any Suspicious Activity

3. Create a New Case and Escalate any alerts to this case

4. Take screenshots and describe what you're doing