A laptop is needed only for the evening bootcamp sessions. If you do not have a laptop, you may still attend the evening sessions for the instruction component, but you will not receive the full value you would get by participating in the hands-on exercises.

Security 401: SANS Security Essentials courses consist of daytime instruction from 9:00am to 5:00pm, followed by special Bootcamp Hands-On sessions in the evenings. The Bootcamp sessions are designed to allow students to utilize the knowledge gained throughout the course in an instructor-led environment. Students will have the opportunity to install, configure and use the tools and techniques that they have learned. CDs will be provided that contain all of the tools required for the exercises.

NOTE: Do not bring a regular production laptop for this class! When installing software, there is always a chance of breaking something else on the system. Students should assume that all data could be lost.

Students attending the conference are required to bring their own laptops that are properly configured. There is not enough time in class to help you install your laptop. Please note that your laptop must be properly installed and configured before you come to class. Students are also required to test their systems (as described below) prior to coming to class. In order to perform the exercises, students have three options. All options will work but option 1 is recommended.

Option 1: Bring a laptop loaded with XP according to the instructions. This should be a default installation of Windows XP Professional SP2 with all of the options loaded.

For the Linux portion, bootable Knoppix can be used. The version that is recommended for the class is Knoppix STD, which can be found at http://www.knoppix-std.org/. This version has all of the tools needed for the class pre-installed. This CD is based off of Knoppix and does not load anything onto the hard drive. Everything runs from memory and has no impact on the XP installation. While SANS will provide a bootable Linux CD during the class, please download a version and test your system prior to coming to class. Most laptops work with Knoppix, however there are some newer laptops that have compatibility problems. If your system will not work with Knoppix please use one of the other options below or troubleshoot the problem, prior to coming to class.

Test for Option 1: Please run this test prior to coming to class. Boot your system off of Knoppix STD and confirm that your system fully boots and that the Linux GUI properly loads.

Option 2: Bring a laptop loaded with XP according to the instructions. This should be a default installation of Windows XP Professional SP2 with all of the options loaded.
For the Linux portion, Knoppix can also be run from VMWare. VMWare can be downloaded/purchased from http://www.vmware.com/. The version that is recommended for the class is Knoppix STD, which can be found at http://www.knoppix-std.org/. This version has all of the tools needed for class pre-installed. If option 1 does not work, option 2 can be used as a workaround.

Test for Option 2: Please run this test prior to coming to class. Using VMWare boot your system into Knoppix STD and confirm that you system fully boots and that the Linux GUI properly loads.

Option 3: For students wanting more of a challenge you can bring a dual-boot laptop with a minimum of 128MB of RAM and a 350MHz processor with Windows XP Professional and Debian or another variant of Linux installed on it. You may bring any version of Linux but check the list below to make sure all of the tools are properly working. NOTE: Make sure you follow the instructions VERY carefully because some of the tools will not compile if you do not install the correct libraries. Please follow the install directions when installing Windows XP Professional and Linux to ensure you have the proper packages installed. We have listed detailed instructions on how to install a dual-boot system that can be found at www.sans.org/conference/os_install2.pdf. If you already have a dual-boot laptop, please look over the install directions to guarantee that you have the appropriate packages installed. The conference exercises were thoroughly tested and work on dual-boot systems that were installed as outlined in this document.

Windows should be a default installation of Windows XP Professional SP2 with all of the options loaded.

With Linux it is critical that all of the libraries are properly installed including the compilers. Prior coming to class make sure that all of the following tools compile and run:

• Nessus
• Tcp dump
• Ethereal (wire shark)
• Nessus
• Hping2
• Nmap
• Snort
  

Test for Option 3: Please run this test prior to coming to class. Boot into Windows and confirm everything loads properly. Reboot the system into Linux and properly install the above tools. If the tools run correctly, then the system is properly configured.

Your laptop should also have a properly configured CD-ROM drive, (optional) 802.11 wireless card that works only under Windows and Ethernet NIC (network interface card). Be sure to check that the CD-ROM and Ethernet card work properly under the appropriate operating systems. Prior to coming to class the network interfaces should be tested to prove that they can be configured and that all of the proper drivers have been installed.

To get the most benefit from the evening course exercises, you should also bring a small hub and two Ethernet patch cables. The hub and Ethernet cables are not required for this course. The benefit in bringing these is that you can connect to other students' machines to test the functionality of the tools that are discussed in the exercises and course.

The other requirement you need for this course is an understanding of both Windows XP Professional and Linux. We provide a document that introduces you to both of these operating systems. The document also gives an overview of the commands you need to understand for the class. This document is available at www.sans.org/conference/intro_xp_linux.pdf. You should review this document before attending the class and ensure that you know how to run the commands on your laptop.

In summary, before you arrive at the conference, you should:

Download the install document (www.sans.org/conference/os_install2.pdf)
Install your systems using one of the three options
Download the introduction to Linux and XP Professional document (www.sans.org/conference/intro_xp_linux.pdf)
Have a properly configured system CD-ROM drive and NIC (wireless and Ethernet network interface cards)
Run the proper tests
It is critical that you work through the documents before class so that you arrive with a properly configured laptop and a base understanding of Windows XP Professional and Linux.

We look forward to your attendance at the conference.

If you have any questions, please do not hesitate to email me at ecole@rusecure.com.

By properly preparing, we know that you will have a knowledge rich and enjoyable bootcamp session.

Sincerely,
Dr. Eric Cole
Security Essentials and Bootcamp
Course Manager