Create a Windows Server VM

Create a Linux Server VM

Enable Auditing:

Using your Windows Server VM$,$ configure auditing to include auditing for failed login attempts.

Audit whenever a new file is created or copied.

Identify at least $15$ additional things that you are going to audit within your system.

Search through all the different areas within the Audit setting to ensure you get a good cross$-$section of things to audit. Discuss within your groups which events would be most useful to audit to ensure you get a good set of audited events.

Take a screen shot of the events you have selected to audit

Using your Linux VM$,$ set up at least $5$ events to log

Generate events in the logs

Using your Windows VM Server, intentionally fail the login $3$ times.

Find the actual audit file and find your $3$ failed login attempts.

Take a screen shot of your $3$ failed login attempts to submit with your Executive Summary.

Create $3$ folders and $3$ files within each folder.

Take a screen shot of your audit log showing the files$/$folders were created

Trigger events for each of the other items that you configured to audit

Using Event Viewer, take a screen grab showing the different events that were triggered

Which ones showed up in the System Log area of Event Viewer?

Which ones showed up in the Security Log area of Event Viewer?

Which ones showed up in the Application Log area of Event Viewer?

Using your Linux VM$,$ generate at least $3$ events in the log file.

Include screen shots of the log file showing events that were triggered.

How to complete this lab?