Current Setup

TODO: Come back and complete this:

Microsoft Office

We can install Office 2019 Professional from the ISO link below. Largert list can be found here.

https://officecdn.microsoft.com/db/492350f6-3a01-4f97-b9c0-c7c6ddf67d60/media/en-us/Professional2019Retail.img

Exchange Server

Download Cumulative Update 12 for Exchange Server 2019 (KB5011156) from Official Microsoft Download CenterMicrosoft Store - Download Center

Exchange Server build numbers and release datesMicrosoftLearn

Vulnerable AD

There are many Github repositories we can use to automate the setup of vulnerable active directory objects. Here are two nice ones:

GitHub - davidprowe/BadBlood: BadBlood by @davidprowe, Secframe.com, fills a Microsoft Active Directory Domain with a structure and thousands of objects. The output of the tool is a domain similar to a domain in the real world. After BadBlood is ran on a domain, security analysts and engineers can practice using tools to gain an understanding and prescribe to securing Active Directory. Each time this tool runs, it produces different results. The domain, users, groups, computers and permissions are different. Every. Single. Time.GitHub

GitHub - safebuffer/vulnerable-AD: Create a vulnerable active directory that's allowing you to test most of the active directory attacks in a local labGitHub