#sift workstation

[dfir-world]

Tutorial on installing the latest SANS Sift workstation [Version release in May 2021]

[dfir-world]

SANS SIFT Workstation Installation Steps

Hello everyone, as I have promised in my YouTube video which is a Tutorial on SIFT workstation, I am sharing the Unix shell commands  required for installing the SIFT workstation. Please follow the steps below and feel free to drop the comments if you need any assistance regarding the topic or want to share any constructive criticism.

Official site for SANS SIFT Workstation installation instruction: https://www.sans.org/tools/sift-workstation/

Steps are as follows:

1. Download Ubuntu 20.04 ISO file and install Ubuntu 20.04 on VMware. For tutorial watch this YouTube Video.

2. Install SIFT-CLI by downloading latest releases of 3 files - “sift-cli-linux”, “sift-cli-linux.sig” & “sift-cli.pub” [check for the latest release]

$ sudo wget <paste the link of latest release from GitHub page> $ sudo wget <paste the link of latest release from GitHub page> $ sudo wget <paste the link of latest release from GitHub page> 3. Install cosign. For installing Cosign, you need to have Go 1.16+ (for installing Golang above 1.16 scroll to the bottom of the post). If the required Go version is installed in your Ubuntu, then copy paste the following command on terminal to install Cosign.

$ go install github.com/sigstore/cosign/cmd/cosign@latest

4. Post successful installation of Cosign we need to validate sift-cli. For that copy-&-paste the following command on terminal

$ cosign verify-blob --key sift-cli.pub --signature sift-cli-linux.sig sift-cli-linux

5. Move the sift-cli file to sift directory under local bin directory. For that copy-&-paste the following command on terminal

$ sudo mv sift-cli-linux /usr/local/bin/sift

6. Assign read, write and execute rights over Sift directory. For that copy-&-paste the following command on terminal

$ sudo chmod 755 /usr/local/bin/sift

7. Finally type the following command and then reboot the machine once the installation is completed

$ sudo sift install

=============================================================

Steps to install Golang on Ubuntu

1. To download the latest version of Go visit the official download page and download the tarball file through terminal. For that use the following command:

$ sudo wget <paste the link of latest release from download page>

2.  Extract the tarball to /usr/local directory.  For that use the following command:

$ sudo tar -C /usr/local -xzf <file name>

3. Now add the Go binary path to the PATH environment variable. For that use the following command:

$ export PATH=$PATH:/usr/local/go/bin

4. Apply changes by using following command:

$ source ~/.bashrc

5. You can verify if the installation is completed, by checking the version

$ go version

!!!!! Happy Learning !!!!!!

=============================================================