tag:blogger.com,1999:blog-40555593688572585592024-03-12T15:22:48.609-07:00Chip GuyChiphttp://www.blogger.com/profile/10598802593976246104noreply@blogger.comBlogger4125tag:blogger.com,1999:blog-4055559368857258559.post-8662197985742662062015-02-25T12:01:00.001-08:002015-02-25T12:02:59.225-08:00Casa Fantastica, Manuel Antonio, Costa Rica - Howler Monkey +1<iframe frameborder="0" height="450" src="https://www.google.com/maps/embed?pb=!1m18!1m12!1m3!1d15744.911286015415!2d-84.15799762073098!3d9.401394676881427!2m3!1f0!2f0!3f0!3m2!1i1024!2i768!4f13.1!3m3!1m2!1s0x0000000000000000%3A0x946947b60f8c1319!2sCasa+Fantastica!5e0!3m2!1sen!2sus!4v1424892912089" style="border: 0;" width="600"></iframe><br />
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="http://1.bp.blogspot.com/-mechrkVePZ8/VO4pH3BqFBI/AAAAAAAADFo/KarkJQAA_7c/s1600/Howler02_ManuelAntonio_20150210.jpg" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img border="0" src="http://1.bp.blogspot.com/-mechrkVePZ8/VO4pH3BqFBI/AAAAAAAADFo/KarkJQAA_7c/s1600/Howler02_ManuelAntonio_20150210.jpg" height="424" width="640" /></a></div>
<a href="http://3.bp.blogspot.com/-jeR15oICMfg/VO4pHViCsJI/AAAAAAAADFk/uFMAcjSpUv4/s1600/Howler02_02_ManuelAntonio_20150210.jpg" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"></a><br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://3.bp.blogspot.com/-jeR15oICMfg/VO4pHViCsJI/AAAAAAAADFk/uFMAcjSpUv4/s1600/Howler02_02_ManuelAntonio_20150210.jpg" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"></a><a href="http://2.bp.blogspot.com/-uUXdr9PibPM/VO4pH0s2KsI/AAAAAAAADFw/8Ov-ai9WyQ4/s1600/Howler01_ManuelAntonio_20150210.jpg" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img border="0" src="http://2.bp.blogspot.com/-uUXdr9PibPM/VO4pH0s2KsI/AAAAAAAADFw/8Ov-ai9WyQ4/s1600/Howler01_ManuelAntonio_20150210.jpg" height="424" width="640" /></a></div>
<div style="text-align: left;">
<a href="https://3.bp.blogspot.com/-jeR15oICMfg/VO4pHViCsJI/AAAAAAAADFk/uFMAcjSpUv4/s1600/Howler02_02_ManuelAntonio_20150210.jpg" imageanchor="1" style="clear: left; display: inline !important; margin-bottom: 1em; margin-right: 1em;"><img border="0" src="http://3.bp.blogspot.com/-jeR15oICMfg/VO4pHViCsJI/AAAAAAAADFk/uFMAcjSpUv4/s1600/Howler02_02_ManuelAntonio_20150210.jpg" height="529" width="640" /></a></div>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="http://2.bp.blogspot.com/-G6i5dBIAR6A/VO4pH1zgoRI/AAAAAAAADF4/uAlwC5_13Jg/s1600/Howler03_02_ManuelAntonio_20150210.jpg" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img border="0" src="http://2.bp.blogspot.com/-G6i5dBIAR6A/VO4pH1zgoRI/AAAAAAAADF4/uAlwC5_13Jg/s1600/Howler03_02_ManuelAntonio_20150210.jpg" height="483" width="640" /></a></div>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="http://3.bp.blogspot.com/-t0wwQTRPYDg/VO4pI09HD8I/AAAAAAAADGA/F5GvdpRZItc/s1600/Howler03_ManuelAntonio_20150210.jpg" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img border="0" src="http://3.bp.blogspot.com/-t0wwQTRPYDg/VO4pI09HD8I/AAAAAAAADGA/F5GvdpRZItc/s1600/Howler03_ManuelAntonio_20150210.jpg" height="424" width="640" /></a></div>
<br />
<div class="separator" style="clear: both; text-align: center;">
</div>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="http://1.bp.blogspot.com/-x1D7MVX01u8/VO4pJVc6CfI/AAAAAAAADGI/7ERAoTaQyas/s1600/Howler04_02_ManuelAntonio_20150210.jpg" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img border="0" src="http://1.bp.blogspot.com/-x1D7MVX01u8/VO4pJVc6CfI/AAAAAAAADGI/7ERAoTaQyas/s1600/Howler04_02_ManuelAntonio_20150210.jpg" height="640" width="588" /></a></div>
<br />
<br />
<!-- Blogger automated replacement: "https://images-blogger-opensocial.googleusercontent.com/gadgets/proxy?url=http%3A%2F%2F3.bp.blogspot.com%2F-jeR15oICMfg%2FVO4pHViCsJI%2FAAAAAAAADFk%2FuFMAcjSpUv4%2Fs1600%2FHowler02_02_ManuelAntonio_20150210.jpg&container=blogger&gadget=a&rewriteMime=image%2F*" with "https://3.bp.blogspot.com/-jeR15oICMfg/VO4pHViCsJI/AAAAAAAADFk/uFMAcjSpUv4/s1600/Howler02_02_ManuelAntonio_20150210.jpg" -->Chiphttp://www.blogger.com/profile/10598802593976246104noreply@blogger.com0tag:blogger.com,1999:blog-4055559368857258559.post-30900770964753998142015-02-25T11:41:00.000-08:002015-02-25T11:44:24.107-08:00Casa Fantastica, Manuel Antonio, Costa Rica - Three-Toed Sloth<div class="separator" style="clear: both; text-align: left;">
Sloths do fall from trees.</div>
<br />
<iframe frameborder="0" height="450" src="https://www.google.com/maps/embed?pb=!1m18!1m12!1m3!1d15744.911286015415!2d-84.15799762073098!3d9.401394676881427!2m3!1f0!2f0!3f0!3m2!1i1024!2i768!4f13.1!3m3!1m2!1s0x0000000000000000%3A0x946947b60f8c1319!2sCasa+Fantastica!5e0!3m2!1sen!2sus!4v1424892912089" style="border: 0;" width="600"></iframe>
<br />
<div class="separator" style="clear: both; text-align: left;">
<br /></div>
<div class="separator" style="clear: both; text-align: left;">
<a href="http://2.bp.blogspot.com/-ychRwJFBjOM/VO4hXR1xqoI/AAAAAAAADEw/Q95mbWo558Y/s1600/Sloth01_ManuelAntonio_20150210.jpg" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img border="0" src="http://2.bp.blogspot.com/-ychRwJFBjOM/VO4hXR1xqoI/AAAAAAAADEw/Q95mbWo558Y/s1600/Sloth01_ManuelAntonio_20150210.jpg" height="640" width="424" /></a></div>
<div class="separator" style="clear: both; text-align: center;">
<a href="http://3.bp.blogspot.com/-YGfrEDf3lG8/VO4hXWSsbnI/AAAAAAAADEs/6jZQKZnpVYE/s1600/Sloth02_ManuelAntonio_20150210.jpg" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img border="0" src="http://3.bp.blogspot.com/-YGfrEDf3lG8/VO4hXWSsbnI/AAAAAAAADEs/6jZQKZnpVYE/s1600/Sloth02_ManuelAntonio_20150210.jpg" height="640" width="424" /></a></div>
<br />
<br />
<div class="separator" style="clear: both; text-align: left;">
<a href="http://4.bp.blogspot.com/-kAcUlOLIr-E/VO4hX9t28mI/AAAAAAAADE0/6eJazuFXA14/s1600/Sloth03_ManuelAntonio_20150210.jpg" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img border="0" src="http://4.bp.blogspot.com/-kAcUlOLIr-E/VO4hX9t28mI/AAAAAAAADE0/6eJazuFXA14/s1600/Sloth03_ManuelAntonio_20150210.jpg" height="640" width="424" /></a></div>
<br />
<div class="separator" style="clear: both; text-align: left;">
<a href="http://4.bp.blogspot.com/-FvD7p72murA/VO4hYt-5N5I/AAAAAAAADFE/qMjpppZn6a0/s1600/Sloth04_ManuelAntonio_20150210.jpg" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img border="0" src="http://4.bp.blogspot.com/-FvD7p72murA/VO4hYt-5N5I/AAAAAAAADFE/qMjpppZn6a0/s1600/Sloth04_ManuelAntonio_20150210.jpg" height="424" width="640" /></a></div>
<br />
<div class="separator" style="clear: both; text-align: left;">
<a href="http://2.bp.blogspot.com/-r-dg3uvq6jk/VO4hZKVw7mI/AAAAAAAADFI/tVpKEH8Lvl4/s1600/Sloth05_ManuelAntonio_20150210.jpg" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img border="0" src="http://2.bp.blogspot.com/-r-dg3uvq6jk/VO4hZKVw7mI/AAAAAAAADFI/tVpKEH8Lvl4/s1600/Sloth05_ManuelAntonio_20150210.jpg" height="424" width="640" /></a></div>
<br />
<div class="separator" style="clear: both; text-align: left;">
<a href="http://1.bp.blogspot.com/-3rctRcCusRk/VO4hZd9-OoI/AAAAAAAADFQ/N8p-IwkRbL4/s1600/Sloth06_ManuelAntonio_20150210.jpg" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img border="0" src="http://1.bp.blogspot.com/-3rctRcCusRk/VO4hZd9-OoI/AAAAAAAADFQ/N8p-IwkRbL4/s1600/Sloth06_ManuelAntonio_20150210.jpg" height="640" width="424" /></a></div>
<br />Chiphttp://www.blogger.com/profile/10598802593976246104noreply@blogger.com0Casa Fantastica, Manuel Antonio, Costa Rica9.40134916043867 -84.15784835815439.39743266043867 -84.1628908581543 9.40526566043867 -84.1528058581543tag:blogger.com,1999:blog-4055559368857258559.post-2562589962964005542014-12-04T10:50:00.002-08:002014-12-05T07:15:37.148-08:00<h3>
Installing SIFT 3.0 on Apple Mac OS X Yosemite 10.10.1</h3>
Applications needed: SIFT Kit 3.0, Keka File Archiver, VirtualBox<br />
<br />
Download the latest version of the SIFT Kit <a href="http://digital-forensics.sans.org/community/downloads" target="_blank">here</a>. If you don't already have one, you'll need to create an account with SANS.<br />
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="http://2.bp.blogspot.com/-KQCc46KVCOo/VICNjx1rLhI/AAAAAAAAC_U/Kb6txbygqUk/s1600/Screen%2BShot%2B2014-12-04%2Bat%2B11.29.58%2BAM.png" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em; text-align: left;"><img border="0" src="http://2.bp.blogspot.com/-KQCc46KVCOo/VICNjx1rLhI/AAAAAAAAC_U/Kb6txbygqUk/s1600/Screen%2BShot%2B2014-12-04%2Bat%2B11.29.58%2BAM.png" height="290" width="400" /></a></div>
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
The SIFT Kit is compressed using <a href="http://www.7-zip.org/" target="_blank">7z</a>. Use an application like <a href="http://www.kekaosx.com/" target="_blank">Keka</a> to extract it on OS X. Once you install Keka, double-click on the SIFT file you downloaded. The file will begin extracting in the same directory.<br />
<br />
<a href="http://1.bp.blogspot.com/-JlXY1M4Jr9s/VICYcoI23MI/AAAAAAAAC_k/zyuWaG5pVCE/s1600/Screen%2BShot%2B2014-12-04%2Bat%2B12.22.23%2BPM.png" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img border="0" src="http://1.bp.blogspot.com/-JlXY1M4Jr9s/VICYcoI23MI/AAAAAAAAC_k/zyuWaG5pVCE/s1600/Screen%2BShot%2B2014-12-04%2Bat%2B12.22.23%2BPM.png" height="128" width="400" /></a><br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
Once it's complete, you will see a new folder in the same directory. The SIFT Workstation 3 folder contains the VMWare virtual appliance files that are used by the SIFT Kit. Move these to a permanent location.<br />
<br />
<a href="http://4.bp.blogspot.com/-VIgB7CvBTaA/VICZkcQlhoI/AAAAAAAAC_s/W-7Npw8Cakw/s1600/Screen%2BShot%2B2014-12-04%2Bat%2B12.27.15%2BPM.png" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em; text-align: left;"><img border="0" src="http://4.bp.blogspot.com/-VIgB7CvBTaA/VICZkcQlhoI/AAAAAAAAC_s/W-7Npw8Cakw/s1600/Screen%2BShot%2B2014-12-04%2Bat%2B12.27.15%2BPM.png" height="122" width="400" /></a><br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
Open VirtualBox.<br />
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="http://3.bp.blogspot.com/-Scs4wkzRs_c/VICe-j8bodI/AAAAAAAADAA/myXbH97-z6g/s1600/Screen%2BShot%2B2014-12-04%2Bat%2B12.47.08%2BPM.png" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em; text-align: left;"><img border="0" src="http://3.bp.blogspot.com/-Scs4wkzRs_c/VICe-j8bodI/AAAAAAAADAA/myXbH97-z6g/s1600/Screen%2BShot%2B2014-12-04%2Bat%2B12.47.08%2BPM.png" height="340" width="400" /></a></div>
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
Click <b>New</b>.<br />
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="http://2.bp.blogspot.com/-tlDi8OQ0NL8/VICe-rHiGdI/AAAAAAAAC_8/9twJmYy3uK4/s1600/Screen%2BShot%2B2014-12-04%2Bat%2B12.47.33%2BPM.png" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em; text-align: left;"><img border="0" src="http://2.bp.blogspot.com/-tlDi8OQ0NL8/VICe-rHiGdI/AAAAAAAAC_8/9twJmYy3uK4/s1600/Screen%2BShot%2B2014-12-04%2Bat%2B12.47.33%2BPM.png" height="340" width="400" /></a></div>
<br />
<br />
<div class="separator" style="clear: both; text-align: left;">
The SIFT Workstation 3.0 runs Linux, specifically Ubuntu 12.04 LTS (64-bit). Pick a name for your virtual machine, select the aforementioned settings and click <b>Continue</b>.</div>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="http://2.bp.blogspot.com/-4WgDGiflrFo/VICe_b7zQxI/AAAAAAAADAM/oBbAfYEv64Y/s1600/Screen%2BShot%2B2014-12-04%2Bat%2B12.49.10%2BPM.png" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em; text-align: left;"><img border="0" src="http://2.bp.blogspot.com/-4WgDGiflrFo/VICe_b7zQxI/AAAAAAAADAM/oBbAfYEv64Y/s1600/Screen%2BShot%2B2014-12-04%2Bat%2B12.49.10%2BPM.png" height="340" width="400" /></a></div>
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<div style="text-align: left;">
<br /></div>
<div style="text-align: left;">
<br /></div>
<div style="text-align: left;">
<br />
SIFT is lean. You can get by with 1 GB of RAM, and I haven't seen much of a difference when you add more than 2 GB of memory.</div>
<div style="text-align: left;">
<br /></div>
<div class="separator" style="clear: both; text-align: center;">
<a href="http://1.bp.blogspot.com/-AdZxcx6iLbU/VICe_ISXbeI/AAAAAAAADAE/5eH4zLfPERI/s1600/Screen%2BShot%2B2014-12-04%2Bat%2B12.49.42%2BPM.png" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em; text-align: left;"><img border="0" src="http://1.bp.blogspot.com/-AdZxcx6iLbU/VICe_ISXbeI/AAAAAAAADAE/5eH4zLfPERI/s1600/Screen%2BShot%2B2014-12-04%2Bat%2B12.49.42%2BPM.png" height="340" width="400" /></a></div>
<div style="text-align: left;">
<br /></div>
<div style="text-align: left;">
<br /></div>
<div style="text-align: left;">
<br /></div>
<div style="text-align: left;">
<br /></div>
<div style="text-align: left;">
<br /></div>
<div style="text-align: left;">
<br /></div>
<div style="text-align: left;">
<br /></div>
<div style="text-align: left;">
<br /></div>
<div style="text-align: left;">
<br /></div>
<div style="text-align: left;">
<br /></div>
<div style="text-align: left;">
<br /></div>
<div style="text-align: left;">
<br /></div>
<div style="text-align: left;">
<br /></div>
<div style="text-align: left;">
<br /></div>
<div style="text-align: left;">
<br /></div>
<div style="text-align: left;">
<br /></div>
<br />
<br />
<br />
<br />
<br />
Next, you'll need to tell VirtualBox what disk to use. Select SIFT Workstation 3.0 Core Drive.vmdk.<br />
<br />
<span id="goog_1911015090"></span><br />
<div class="separator" style="clear: both; text-align: center;">
<a href="http://3.bp.blogspot.com/-plzChim22OU/VICpuIdjYtI/AAAAAAAADBg/RDCDN2F9rSU/s1600/Screen%2BShot%2B2014-12-04%2Bat%2B12.27.15%2BPM%2B_%2Bcases.png" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em; text-align: left;"><img border="0" src="http://3.bp.blogspot.com/-plzChim22OU/VICpuIdjYtI/AAAAAAAADBg/RDCDN2F9rSU/s1600/Screen%2BShot%2B2014-12-04%2Bat%2B12.27.15%2BPM%2B_%2Bcases.png" height="123" width="400" /></a></div>
<br />
<br />
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="http://2.bp.blogspot.com/-QZ2dx85nmuU/VICkpnlCgQI/AAAAAAAADAk/ctSgNakPptE/s1600/Screen%2BShot%2B2014-12-04%2Bat%2B1.14.37%2BPM.png" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em; text-align: left;"><img border="0" src="http://2.bp.blogspot.com/-QZ2dx85nmuU/VICkpnlCgQI/AAAAAAAADAk/ctSgNakPptE/s1600/Screen%2BShot%2B2014-12-04%2Bat%2B1.14.37%2BPM.png" height="340" width="400" /></a></div>
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
You should end up with a new virtual machine, but we're not done yet. The SIFT Kit has a dynamically expanding disk for cases. We need to add it in the settings in VirtualBox so that it's recognized when we fire up the virtual machine. Click on <b>Settings</b>.<br />
<div style="text-align: left;">
<br /></div>
<div class="separator" style="clear: both; text-align: center;">
<a href="http://4.bp.blogspot.com/-BhRMCejirUk/VICmW5aaCSI/AAAAAAAADAw/bwHm5bWXTPc/s1600/Screen%2BShot%2B2014-12-04%2Bat%2B1.20.25%2BPM.png" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em; text-align: left;"><img border="0" src="http://4.bp.blogspot.com/-BhRMCejirUk/VICmW5aaCSI/AAAAAAAADAw/bwHm5bWXTPc/s1600/Screen%2BShot%2B2014-12-04%2Bat%2B1.20.25%2BPM.png" height="331" width="400" /></a></div>
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<div style="text-align: left;">
<br /></div>
<div style="text-align: left;">
<br /></div>
<div style="text-align: left;">
<br /></div>
<div style="text-align: left;">
<br /></div>
<div style="text-align: left;">
<br /></div>
<div style="text-align: left;">
<br /></div>
<div style="text-align: left;">
<br /></div>
<div style="text-align: left;">
<br /></div>
<div style="text-align: left;">
<br /></div>
<div style="text-align: left;">
<br /></div>
<div style="text-align: left;">
<br />
Highlight the SATA controller in the Storage Tree pane. Click the Add icon (bottom left; blue disk with green plus sign). Select <b>Add Hard Disk</b>.</div>
<div style="text-align: left;">
<br /></div>
<div class="separator" style="clear: both; text-align: center;">
<a href="http://3.bp.blogspot.com/-hHY2Gk0o3vI/VICn5XvLeJI/AAAAAAAADA8/1S054J7Oyl4/s1600/Screen%2BShot%2B2014-12-04%2Bat%2B1.20.39%2BPM.png" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em; text-align: left;"><img border="0" src="http://3.bp.blogspot.com/-hHY2Gk0o3vI/VICn5XvLeJI/AAAAAAAADA8/1S054J7Oyl4/s1600/Screen%2BShot%2B2014-12-04%2Bat%2B1.20.39%2BPM.png" height="332" width="400" /></a></div>
<div style="text-align: left;">
<br /></div>
<div style="text-align: left;">
<br /></div>
<div style="text-align: left;">
<br /></div>
<div style="text-align: left;">
<br /></div>
<div style="text-align: left;">
<br /></div>
<div style="text-align: left;">
<br /></div>
<div style="text-align: left;">
<br /></div>
<div style="text-align: left;">
<br /></div>
<div style="text-align: left;">
<br /></div>
<div style="text-align: left;">
<br /></div>
<div style="text-align: left;">
<br /></div>
<div style="text-align: left;">
<br /></div>
<div style="text-align: left;">
<br /></div>
<div style="text-align: left;">
<br /></div>
<div style="text-align: left;">
<br /></div>
<div style="text-align: left;">
<br /></div>
<div style="text-align: left;">
<br /></div>
<div style="text-align: left;">
<br /></div>
<div style="text-align: left;">
<br /></div>
<div style="text-align: left;">
<br /></div>
<div style="text-align: left;">
<br />
Select <b>Choose existing disk</b>.</div>
<div style="text-align: left;">
<br /></div>
<div class="separator" style="clear: both; text-align: center;">
<a href="http://2.bp.blogspot.com/-evEGoUrGwqU/VICoH405s3I/AAAAAAAADBE/1O-5BEGL7OY/s1600/Screen%2BShot%2B2014-12-04%2Bat%2B1.21.02%2BPM.png" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em; text-align: left;"><img border="0" src="http://2.bp.blogspot.com/-evEGoUrGwqU/VICoH405s3I/AAAAAAAADBE/1O-5BEGL7OY/s1600/Screen%2BShot%2B2014-12-04%2Bat%2B1.21.02%2BPM.png" height="331" width="400" /></a></div>
<div style="text-align: left;">
<br /></div>
<div style="text-align: left;">
<br /></div>
<div style="text-align: left;">
<br /></div>
<div style="text-align: left;">
<br /></div>
<div style="text-align: left;">
<br /></div>
<div style="text-align: left;">
<br /></div>
<div style="text-align: left;">
<br /></div>
<div style="text-align: left;">
<br /></div>
<div style="text-align: left;">
<br /></div>
<div style="text-align: left;">
<br /></div>
<div style="text-align: left;">
<br /></div>
<div style="text-align: left;">
<br /></div>
<div style="text-align: left;">
<br /></div>
<div style="text-align: left;">
<br /></div>
<div style="text-align: left;">
<br /></div>
<div style="text-align: left;">
<br /></div>
<div style="text-align: left;">
<br /></div>
<div style="text-align: left;">
<br /></div>
<div style="text-align: left;">
<br /></div>
<div style="text-align: left;">
<br /></div>
<div style="text-align: left;">
<br />
Select <b>SIFT Workstation 3.0 Cases.vmdk</b> file, which is located in the SIFT Workstation 3 folder.</div>
<div style="text-align: left;">
<br /></div>
<div class="separator" style="clear: both; text-align: center;">
<a href="http://2.bp.blogspot.com/-bhLI2j2uQy8/VICoTgabT6I/AAAAAAAADBM/S7NhOByq3ys/s1600/Screen%2BShot%2B2014-12-04%2Bat%2B12.27.15%2BPM%2B_%2Bcases.png" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em; text-align: left;"><img border="0" src="http://2.bp.blogspot.com/-bhLI2j2uQy8/VICoTgabT6I/AAAAAAAADBM/S7NhOByq3ys/s1600/Screen%2BShot%2B2014-12-04%2Bat%2B12.27.15%2BPM%2B_%2Bcases.png" height="123" width="400" /></a></div>
<div style="text-align: left;">
<br /></div>
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="http://3.bp.blogspot.com/-8TDrI4kS71U/VICqBSJVSRI/AAAAAAAADBo/VWxjEbCQeG0/s1600/Screen%2BShot%2B2014-12-04%2Bat%2B1.21.37%2BPM.png" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em; text-align: left;"><img border="0" src="http://3.bp.blogspot.com/-8TDrI4kS71U/VICqBSJVSRI/AAAAAAAADBo/VWxjEbCQeG0/s1600/Screen%2BShot%2B2014-12-04%2Bat%2B1.21.37%2BPM.png" height="340" width="400" /></a></div>
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
You will now see two disks show up under Storage > SATA. The disk that will boot when you start the virtual machine is the Core Drive. This is where the Ubuntu OS is stored. SATA Port 1 is the dynamically expanding Cases disk.<br />
<br />
Next, click Start or double-click the newly created virtual machine. This will boot the SIFT Kit.<br />
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="http://2.bp.blogspot.com/-LZBuLLE6gb8/VICrSQKblVI/AAAAAAAADB0/OpFSTrzm9lg/s1600/Screen%2BShot%2B2014-12-04%2Bat%2B1.42.32%2BPM.png" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em; text-align: left;"><img border="0" src="http://2.bp.blogspot.com/-LZBuLLE6gb8/VICrSQKblVI/AAAAAAAADB0/OpFSTrzm9lg/s1600/Screen%2BShot%2B2014-12-04%2Bat%2B1.42.32%2BPM.png" height="308" width="400" /></a></div>
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
After Ubuntu boots, you should see the SANS login screen. Log on and start forensicating.Chiphttp://www.blogger.com/profile/10598802593976246104noreply@blogger.com0tag:blogger.com,1999:blog-4055559368857258559.post-77655921327182182652013-12-11T06:50:00.001-08:002013-12-11T06:50:32.881-08:00Chiphttp://www.blogger.com/profile/10598802593976246104noreply@blogger.com0