AWS - Launch Instance
1. Choose an Amazon Machine Image (AMI)
Select ami-fce3c696 Ubuntu Server 14.04 LTS (HVM), SSD Volume Type
2. Choose an instance Type
m4.large (6.5 ECUs, 2 vCPUs, 2.4GHz, Intel Xeon E5-2676v3, 8GiB Memory, EBS only)
3. Configure Instance Details
Choose same Network as victim.
4. Add Storage
Root volume: Size 20GiB
Volume Type = General Purpose SSD (GP2)
5. Tag Instance
Key: Purpose, Value: SIFT
6. Configure Security Group
Security Group Name: SIFT
Description: SIFT workstation access group
Rules:
Type Protocol Port Range Source
SSH TCP 22 66.244.108.136/32
SSH TCP 22 173.15.17.100/32
SSH TCP 22 75.70.22.64/32
7. Review
Create a new keypair
Named SIFT
Download SIFT.pem
New host is 54.164.98.86
Log in via ssh as ubuntu user with the SIFT.pem key
THen, run this:
wget --quiet -O - https://raw.github.com/sans-dfir/sift-bootstrap/master/bootstrap.sh | sudo bash -s -- -i -s -y
