Add Unit 1 lab files

Author: sarcb

Files/lab-1/DHCP.txt

@@ -0,0 +1,25 @@
+ID,Date,Time,Description,IP Address,Host Name,MAC Address
+
+00,04/19/23,08:43:40,Started,,,
+55,04/19/23,08:43:49,Authorization(servicing),,,
+51,04/19/23,08:43:56,Authorization(succeeded),,,
+25,04/19/23,08:44:00,0 leases expired and 0 leases deleted,,,
+25,04/19/23,08:44:02,0 leases expired and 0 leases deleted,,,
+10,04/19/23,08:44:06,Assign,10.10.1.5,USER1,C9:E1:DE:B0:17:3B
+02,04/19/23,09:15:20,Log Paused,,,
+25,04/19/23,12:11:13,0 leases expired and 0 leases deleted,,,
+30,04/19/23,12:11:20,DNS Update Request,10.10.1.5,USER1,C9:E1:DE:B0:17:3B
+12,04/19/23,12:11:25,Release,10.10.1.5,USER1,C9:E1:DE:B0:17:3B
+10,04/19/23,12:11:27,Assign,10.10.1.4,USER2,3B:3F:E2:95:2F:89
+32,04/19/23,12:11:29,DNS Update Successful,10.10.1.4,USER2,3B:3F:E2:95:2F:89
+25,04/19/23,12:11:30,0 leases expired and 0 leases deleted,,,
+30,04/19/23,12:56:14,DNS Update Request,10.10.1.4,USER2,3B:3F:E2:95:2F:89
+12,04/19/23,12:56:16,Release,10.10.1.4,USER2,3B:3F:E2:95:2F:89
+10,04/19/23,12:56:21,Assign,10.10.1.4,USER2,19:0B:FF:C8:9E:D6
+32,04/19/23,12:56:22,DNS Update Successful,10.10.1.4,USER2,19:0B:FF:C8:9E:D6
+25,04/19/23,12:11:18,2 leases expired and 0 leases deleted,,,
+11,04/19/23,13:11:20,Renewed,10.10.1.5,USER2,C9:E1:DE:B0:17:3B
+24,04/19/23,13:11:24,Database Cleanup Begin,,,
+25,04/19/23,13:11:33,0 leases expired and 1 leases deleted,,,
+25,04/19/23,13:11:34,0 leases expired and 0 leases deleted,,,
+01,04/19/23,20:02:17,Stopped,,,

Files/lab-1/SMTP.pcap

@@ -0,0 +1,62 @@
+{\rtf1\ansi\ansicpg1252\cocoartf2706
+\cocoatextscaling0\cocoaplatform0{\fonttbl\f0\fnil\fcharset0 Menlo-Regular;}
+{\colortbl;\red255\green255\blue255;\red255\green255\blue255;\red0\green0\blue0;}
+{\*\expandedcolortbl;;\cssrgb\c100000\c100000\c100000;\cssrgb\c0\c0\c0;}
+\margl1440\margr1440\vieww13000\viewh12980\viewkind0
+\deftab720
+\pard\pardeftab720\partightenfactor0
+
+\f0\fs26 \cf0 \cb2 \expnd0\expndtw0\kerning0
+\outl0\strokewidth0 \strokec3 Source:  Microsoft-Windows-Security-Auditing\
+\
+Date:  2023-4-19 08:44:06\
+Event ID:  4624\
+Task Category:  Logon\
+User: Jane Doe\
+Computer: USER1\
+Subject:\cb1 \strokec3 \
+\cb2 \strokec3 \'a0\'a0\'a0Security ID:\'a0 SYSTEM\cb1 \strokec3 \
+\cb2 \strokec3 \'a0\'a0 Account Name:\'a0 \cb2 \outl0\strokewidth0 WIN-R9H529RIO4Y$\cb1 \outl0\strokewidth0 \strokec3 \
+\cb2 \strokec3 \'a0 \'a0Account Domain:\'a0 \cb2 \outl0\strokewidth0 BORINGOFFICE\cb1 \outl0\strokewidth0 \strokec3 \
+\cb2 \strokec3 \'a0 \'a0Logon ID:\'a0 0x3e7\
+Logon Type:  10\
+\
+\pard\pardeftab720\partightenfactor0
+\cf0 \cb2 \outl0\strokewidth0 Date:  2023-4-19 09:15:20\
+Event ID:  4634\
+Task Category:  Logoff\
+User: Jane Doe\
+Computer: USER1\cb2 \outl0\strokewidth0 \strokec3 \
+\pard\pardeftab720\partightenfactor0
+\cf0 \cb2 \outl0\strokewidth0 Subject:\cb1 \
+\cb2 \'a0\'a0\'a0Security ID:\'a0 SYSTEM\cb1 \
+\cb2 \'a0\'a0 Account Name:\'a0 WIN-R9H529RIO4Y$\cb1 \
+\cb2 \'a0 \'a0Account Domain:\'a0 BORINGOFFICE\cb1 \
+\cb2 \'a0 \'a0Logon ID:\'a0 0x3e7\cb2 \outl0\strokewidth0 \strokec3 \
+\pard\pardeftab720\partightenfactor0
+\cf0 Logon Type:  10\
+\
+\pard\pardeftab720\partightenfactor0
+\cf0 \cb2 \outl0\strokewidth0 Date:  2023-4-19 12:11:13\
+Event ID:  4624\
+Task Category:  Logon\
+User: John Doe\
+Computer: USER2\
+Subject:\cb1 \
+\cb2 \'a0\'a0\'a0Security ID:\'a0 SYSTEM\cb1 \
+\cb2 \'a0\'a0 Account Name:\'a0 WIN-S3L910SE45K!\cb1 \
+\cb2 \'a0 \'a0Account Domain:\'a0 BORINGOFFICE\cb1 \
+\cb2 \'a0 \'a0Logon ID:\'a0 0x3d6\
+Logon Type:  3\
+\
+Date:  2023-4-19 12:56:14\
+Event ID:  4634\
+Task Category:  Logoff\
+User: John Doe\
+Computer: USER2\
+Subject:\cb1 \
+\cb2 \'a0\'a0\'a0Security ID:\'a0 SYSTEM\cb1 \
+\cb2 \'a0\'a0 Account Name:\'a0 WIN-S3L910SE45K!\cb1 \
+\cb2 \'a0 \'a0Account Domain:\'a0 BORINGOFFICE\cb1 \
+\cb2 \'a0 \'a0Logon ID:\'a0 0x3d6\
+Logon Type:  3}

Files/lab-1/Security_log.rtf

@@ -30,4 +30,16 @@ if command -v wireshark >/dev/null 2>&1 ; then
 else
     echo -e "${red}[UNIT 1 LAB]${none} ERROR: Wireshark was not installed correctly!"
     exit 1
+fi
+
+# Move everything in ../Files/lab-1 to ~ and rename it to lab_1
+if [ -e ~/lab_1 ]; then
+    echo -e "${green}[UNIT 1 LAB]${none} lab_1 already exists."
+else
+    if [ -e ~/Files/lab-1 ]; then
+        sudo mv ~/Files/lab-1 ~/lab_1 && echo -e "${green}[UNIT 1 PROJECT]${none} Moved lab 1 files to ~/lab_1"
+    else
+        echo -e "${red}[UNIT 1 LAB]${none} Error: Directory ~/Files/lab-1 does not exist."
+        exit 1
+    fi
 fi