Preparing the Guest

At this point, you should have configured the CAPE host component and you should have designed and defined the number and the names of the virtual machines you are going to use for malware execution.

Now it’s time to create such machines and configure them properly.

• Creation of the Virtual Machine
• Requirements
  • Install Python
  • Additional Software
• Installing the Agent
  • Prior To Windows 10
  • Windows 10+
• Additional Configuration
  • Windows Guest
    • Windows Debloating
    • Disable Microsoft Store
    • Reduce Overall Noise
    • Windows automatically enables the Virus Real-time Protection
    • Enable AutoLogon
• Network Configuration
  • Windows Settings
  • Windows 10
  • Windows XP
  • Virtual Networking
  • Creating an isolated network
  • Setting a static IP
  • Disable Noisy Network Services
  • Teredo
  • Link Local Multicast Name Resolution (LLMNR)
  • gpedit.msc missing
  • Network Connectivity Status Indicator, Error Reporting, etc
• Troubleshooting
  • Where to start diagnosing
  • No Internet connection in the guest
  • PCAP Generation
• Saving the Virtual Machine
  • KVM
    • Snapshot with Virtual Manager (virt-manager)
  • VirtualBox
  • VMware Workstation
  • XenServer
    • Memory Snapshots
    • Booting from Disk
  • Azure
• Cloning the Virtual Machine
• Installing the Linux guest
  • Preparing x32/x64 Linux guests
    • x32 guests
    • x64 guests