> For the complete documentation index, see [llms.txt](https://cybermed.gitbook.io/soc-home-lab/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://cybermed.gitbook.io/soc-home-lab/pre-requestees.md).

# Pre Requestees

To setup our lab we need to have some sort of pre requirements. If you are planning to setup this lab on your own computer you must at least have 16GB of RAM and 100GB of disk space.

In this demo I will setup entire lab on my laptop. If you are using an Apple silicon you can use cloud option other wise you will be face some difficulties.

{% hint style="info" %}
You can try VMware Fusion or Parallels
{% endhint %}

I have already installed the Oracle VM VirtualBox in my laptop. For this lab setup we need,

1. Ubuntu VM
2. Windows 10 or 11 VM

You can downlaod the above images form below links.

{% embed url="<https://ubuntu.com/download/desktop>" %}
Download Ubuntu
{% endembed %}

{% embed url="<https://www.microsoft.com/software-download/windows11>" %}
Download Windows 11
{% endembed %}

I have already installed the Ubuntu on Oracle VM box.

<figure><img src="https://2577361618-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FbNl888Hjdph9qbHHEGkB%2Fuploads%2F2FHsJHum7zoUEEBdAkZo%2Fimage.png?alt=media&amp;token=0719eeb1-af66-4293-8cad-d81199a79b67" alt="" width="563"><figcaption><p>Installing Ubuntu</p></figcaption></figure>

Also I have installed the Windows 10 VM for this lab.

<figure><img src="https://2577361618-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FbNl888Hjdph9qbHHEGkB%2Fuploads%2FiHk3hH5FnLWlzn16NdhB%2Fimage.png?alt=media&amp;token=85fc5458-8079-41e7-8767-7bce42f45081" alt="" width="563"><figcaption><p>Installing Windows 10</p></figcaption></figure>

For the windows 10 VM we have to download and install the windows **Sysmon.**

{% embed url="<https://learn.microsoft.com/en-us/sysinternals/downloads/sysmon>" %}
Download Sysmon
{% endembed %}

Also we need to have to download the Sysmon config file from the GitHub.

{% embed url="<https://github.com/olafhartong/sysmon-modular>" %}
Sysmon Config file
{% endembed %}

Install the Sysmon in the windows 10 VM along with the configuration file which has downloaded above.

```powershell
.\Sysmon64.exe -i .\sysmonconfig.xml
```

<figure><img src="https://2577361618-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FbNl888Hjdph9qbHHEGkB%2Fuploads%2FMckRkvvW6HYQYC3vouD6%2Fimage.png?alt=media&amp;token=b6d275a2-920d-4036-887a-d54fc59f0a9f" alt="" width="563"><figcaption><p>Install Sysmon</p></figcaption></figure>

After installing the Sysmon, you can check Sysmon under the windows event log.

Event Viewer -> Application and Services Logs -> Microsoft -> Windows -> Sysmon

<figure><img src="https://2577361618-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FbNl888Hjdph9qbHHEGkB%2Fuploads%2FsDDAaFvoippQuwxR4RDE%2Fimage.png?alt=media&amp;token=4a7ae3d1-7da4-45cf-818b-85e780e5c18c" alt="" width="563"><figcaption><p>Sysmon in Windows Event Viewer</p></figcaption></figure>

After successfully completing all of the above steps will start to install the Wazuh.

{% hint style="info" %}
You have to configure the nextwork connectivity in between these two VMs.  I have added both VMs in Internal network call soc and used same subnet.
{% endhint %}