Basic OS Security for Cybersecurity

Ajouté : 2026-05-15

[00:00:04]Hello, good evening class. As we promised we are going to demonstrate some of the practical aspect of the course. If you remember the course is operating system security and we are focusing in two uh different type of operating system. The windows operating system and the Linux operating system.

[00:00:26]So in this uh uh practical we are going to start by uh uh Windows operating system where uh we'll look at the uh let me I will have some questions now uh which we are going to follow one after another. So I think the first one uh is to demonstrate uh uh user account configuration. So I have a question that says create a new uh standard user account named your full name. For example, my full name will be it is how it is on a Windows system. So which means we are going to use Windows operating system. So after creating this uh user account then we configure the account so that it cannot install software or modify system settings which means it's a standard user and not administrators uh without administrators power. So we demonstrate the difference between the standard account and the administrator account. You know administrator account has a very uh full privilege where we can execute a very privileged task and the user uh standard user doesn't have that for you to have a privilege or to execute a free task you need to elevate your privilege which in Windows it will prompt you to agree or to consent on the uh administrator's privilege. So what we will do now is to uh is to demonstrate the procedure.

[00:02:02]So in Windows environment if you want to uh do something like that we can press on the uh on the keyboard the windows uh logo and the I together. For example, when we press this one it will take you to uh to a setting. So from the setting we can uh let me move this one. Sorry.

[00:02:28]From the setting uh from the setting we can look at the user account.

[00:02:36]Uh the user account uh the user account. Then we select uh uh where is it? Uh let me see if I can move this one. Uh we click on user account then email and accounts for example when you click on this one email and accounts then look at add uh new user. So we click on add user then it will take us to this window. Uh then uh let me see this one is closing the window.

[00:03:47]I think yes. So we create uh let me go back. Let me start from the beginning. We we press control and I uh the Windows key and the I. Uh so which will take us to uh the user account. Then uh we click on the user account. From the user account then we we go to then we go to family and other users because we are creating a standard user not administrator which means a family user or other users. If you can remember in the Linux environment we talked about others other users and group and the administrator which means the owner. So now we click on uh family and other users. Then we click on add account.

[00:04:47]Uh so when you click on add account then you wait a moment for it to give the available window where you specify. So uh here it will ask you to uh for email or phone number. So for this practical I think we just click one I don't have this person sign in information. So when you click on this one then uh then you click add a user without Microsoft account as we can see now. So when you click on this one uh then it will ask you to enter the username. For example, I can enter cyber sec for example. For the password I can enter FTV.

[00:05:42]Uh to enter the password you can just give it any password you want to enter.

[00:05:47]Then if you want to answer uh these questions you can answer. For example, let me just take it anyhow.

[00:05:55]ABC and then let me ABC as well. So you can just give it any uh correct answer. This is just for demonstration because of after this practical I will just delete the user.

[00:06:12]So you click on next. So after I click on next uh a user has been created. Look at the user now. So we have the user now has been created. So if you look at this uh if you look at this the question says we should create a standard user you configate the user so that the user cannot install or modify system settings. So now uh uh let me uh see now when you click on this we can change account type uh standard user.

[00:06:51]Yes.

[00:06:58]So, so the user is already standard user doesn't have a privilege to install or modify system settings as we are going to uh see later. So, that is all for the uh the question we can demonstrate the difference between the standard account and the administrator account. So the difference is that the free BL for the administrator account the power for the administrator to install and modify system setting is not available in the standard user. So which means the difference is just uh that power of executing administrative uh task. So question number two says uh we are going to use task manager and performance monitor. So the question says we identify the process currently consuming the highest CPU resources and this question number question B says record the the current CPU and memory usage of the system and then generate or display a performance monitor graph monitoring graph and then finally end one unnecessary running process. So how do we get access to this? So now is what we are going to see to uh To activate uh tax manager you press control shift and escape on the keyboard. Control shift and escape on the keyboard which will open the tax manager for you. Let me close the settings close the so it will open the task manager. So this is the task manager.

[00:08:34]Let me maximize the window. If you look at the processes that are running currently uh we have the Microsoft office what because of it is from there I am opening the the the questions which means this is a process and then we have zoom meeting and two zoom meeting at the same time the so which means the zoom meeting is having two processes that are are running now so Uh this is the task manager. Let me see if I can as if it is not loaded.

[00:09:14]Uh let me see.

[00:09:18]Yes. Okay. So just like this one if you look at it now we have open it the tax manager. Now um uh when you click on processes already processes are selected. Let me maximize the window. If you look at it now, which process is uh we said the question said um the question said uh identify the process currently consuming the highest CPU resources.

[00:09:49]So which one? So look at it now. Look at it in red. It's fluctuating. The high CPU resources is consumed by the boom application. Look at it now. It is Look at it now. high uh power usage is very high the CPU resources if you look at it as well it is consuming 13% 14% which none of the processes is consuming this amount of CPU so which means the zoom application is currently consuming a highest CPU uh uh resource so which means now we we are able to locate it now and the questions number two says okay number B say the current CPU and memory uses for the of the system. So the the the the CPU is this one uh is 23 26% 36%. Look at it how it is fluctuating. So this is the CPU usage and this is the memory usage. So the memory uses the the total memory uses is 49% of the memory is currently being used and the 11% 13% look at how it is fluctuating which means some processes are running in the background. Uh so this is how the you can see uh the CPU uses and the memory uses this is the D usage which is 3% 2% and what have you.

[00:11:12]This is the network usage currently which is 0%. So which means now we we are able to see now if we ask you what is the current CPU uses now it is 26 if 25 is fluctuating. So the the the the next question says we should generate or display a performance monitor graph um generate uh generate uh we generate There's usage default for example performance now you go to performance so look at the graph now because of the question said I think we should generate or display a performance monitor graph so this is the graph we are referring to this is perform monitor graph so which means we are able to display it just if you go to performance then you click on CPU which means you are monitoring the performance of CPU if you want to monitor that of memory you click on memory Mor it will change to the performance monitor memory. If it is disk you click on the disk you see the performance monitor in form of graph. So now we go back for the CPU. And finally the question D says end one unnecessary running process safely. So how do we end the unnecessary process we we we we now go back to this then we go back to process. Let me see if there's any process that I want to end. For example, we uh let me see uh let me see if there's unnecessary process.

[00:13:11]Um let me close one drive for example this one. You right click on this one.

[00:13:16]You click on end task.

[00:13:19]When you click on end task you will see it has gone. So if you look at it it has gone. So which means this is how we safely end a running process. So now we move to the next question which is event viewer and investigation.

[00:13:34]So using event viewer the question says a says locate recent system or application error lock. How do we locate system uh application?

[00:13:51]How do we uh locate system application?

[00:13:57]So we press uh Windows key. If you look at how we open the the the the the user account, we press Windows key plus I.

[00:14:06]This one we we open Windows key plus R.

[00:14:10]So when we open this one, it will give you it it will give us this window where we type we will type what we are looking for. Uh what you type is to type for event viewer. So if you look at it is it is even written because I have tried it event VW which is abbreviation of viewer. So you click on okay it will open event viewer.

[00:14:34]Let me close the uh so it will open event viewer. So look at it now. So now the question says let me take it this side.

[00:14:50]Um let me throw it down. Yeah.

[00:14:56]So the question says uh let me see the question.

[00:15:01]The question says locate recent system or application error log. How do you locate recent system or application loss lock for example uh Windows log look at it now you click on windows lock so it will be open now let me expand the screen uh it will Open log.

[00:15:38]So you open system or application lock.

[00:15:42]Uh this is application lock. Security lock for example. It will take some time before it opens. So look at it now. Uh you so uh then you select system or you select application anyone. Look at it. Now I select application. For example, this is application lock. All these are application lock. Look at it. The level is information date and time. If you look at uh if you look at this date, this is this is an event. The the date is 145 which is today's date 2026 and the time is current time 11:25. If you look at my system time is the same. So and the source is security security SVP and the event ID is 12288 and the tax uh what is this one tax category is none. So this is how you look at the system event. If you look at it is capturing as I as as I have said it is uh actively curing all the events that happens in the course of system operation. So this is how we uh monitor this and the number B says identify one warning or error event. So let us see whether we identify warning.

[00:17:04]This level is information. We keep scrolling. Let me see whether I can find a warning. Look at warning here. This is a warning and the source is security also and the event ID is. So which means this is a warning. Let me see if I can get an error. If I can get system error because of this is warning also. I have skipped. So if you keep scrolling, you will see a system warning. Okay. Error.

[00:17:30]So this is warning also. Uh look at some warnings also. Uh this has some warnings also. Uh if you keep scrolling definitely you'll find an error.

[00:17:45]Definitely you'll find an error. We don't have time. I think we just leave it. But if you keep scrolling, if you look at it, you'll find an arrow. So, question C says, set the source and time of the event. Look at the source. What is the source? Let me go to a particular arrow. For example, uh source and time for a particular event. If you are asked to list a time uh and source of a particular event, for example, this warning, this is the date and time. The date is today's date and the time of this warning is 2:00 p.m.

[00:18:22]2:15 p.m. And the the source is security SVP. Security SVP.

[00:18:31]So this is the source. If you are asked to tell maybe and what is the event ID, this is the event ID A233. So this is how we see it because of if you look at the caption, this is the date and this is the source of the event. So this is how we can answer question C and then question D explain briefly what to call this the event. So if you look at it now you can explain this is for you you can see it and explain. Then number three Windows security configuration uh where we are going to perform the following verify that Windows firewall is enabled. Now how do we verify Windows firewall is enabled? So what you will do is to uh to uh is to open control panel. Then from the control panel you go to system and security. So now let me you can just search for a control panel. Let me close this window. So now we can search for control panel. I can just write control panel. Look at it now. So we click and open control panel. So when you click you open system and security. Look at it now. The first one, system and security.

[00:19:40]This is Windows firewall. You click on system firewall. Where is the status?

[00:19:45]Look at it. Windows defender firewall state. Look at this now. It's on. Which means uh you verify we have verified that the firewall is is on now. So what is the next question now?

[00:20:01]Is enabled? When it is enabled, it will show you on. If it is disabled, it will show you off. So check for pending Windows updates. Now uh how do we check for system update now? Um you go to setting and you go to uh system update. So I think now we are done with the the firewall. Now we have seen the status is uh is already on. So if you want to turn it to to off uh we can let me just to go to the question.

[00:20:34]Let me not. So we can go to we can search also. We can go to setting uh settings. Look at it now. We can search. We can click on settings. Then we click on Windows update. System update. Look at it now. Windows update.

[00:20:50]So we can click and see. Then it will show you pending update. If you look at it now, I have some pending updates. Uh so so you can you can click on the update so that it can continue. So this is how we answer the uh the the question uh uh number B then enable or demonstrated user account control prompt.

[00:21:17]So this is also to enable or demonstrated user account control. Uh so we search you can search it also user account control when you search UAC for example. Let me go and search USC US account control. You click on enter then it will search for user account control.

[00:21:45]So where you can create some uh you can create a level. If you look at it now this is how we when you move it down you will see this text will change. Now currently it is set it is set to notify me only when apps try to make changes to my computer. Now if I click uh forward off there it will change to always notify me when apps try to install software or make changes to my computer notify me when I make changes to Windows setting. So if you take it down you will see that this griefing is changing which means the level of uh uh security is changing. So this is the default. We'll go back for the default. So no need to click. I will just click cancel because of uh we are not asked to do anything.

[00:22:34]And then finally I sorry finally we explain how bit local protect the system uh protect the system. This is a theory.

[00:22:44]No need to demonstrate anything. So and we have explained during our class. So question five for example is a VMware virtual machine set off which we have demonstrated if you can remember in the class I will not do this one because we have done it we have done it practically in the lab where we have done it together with you we demonstrate how we create a virtual machine uh using uh VMware. So what I will just do I have already created uh the application what I will do I will just start it now I will just click on it so that it can be launched. So before it get started. So it has already been launched. So when you have it now if you want to create a virtual machine let me just quickly you click on this one create a new virtual machine. When you click then you wait for it. It will ask you uh install from where do you want to install the operating system. You click on this middle one install dx image file which I said I will give you the dx image file for you to install. When you click on this one then you click on browse. If you click on browse it will take you to the folder where you have the installation media the file. Look at my on here on the desktop. So when you click on this one then you click on or off it will go directly and math the system to this uh operating system which is in form of uh uh uh ISO file. So when you click on this one then you click on next it will ask you the available memory and the available uh disc space you want for the question you have been given uh the the the number I think in the question we said we specify 4 gig RAM and 30 gig uh hard digs. So this is also um uh this is how we specify when you click on next and then if you finish everything then let me cancel because of we have already demonstrated it as I have said you have something like this one because of you are going to give it a name and the username and a password when you want to power it on this is a computer we have a virtual one so when you want to power it on you either right click on this virtual machine then you click power on or you click delay virtual machine anyone will do the same.

[00:25:04]So now I'm clicking the power on. So you wait for it to power on. So now moving to the next question which is question number six. Bic uh Linux navigation commands where the question says you display the current working directory.

[00:25:18]How do we display the current working directory before you do this? Um uh let me see. Uh so it is loading now.

[00:25:35]It's loading. Let me uh maximize the window.

[00:25:43]So for you to often I think if it's okay it's still loading.

[00:25:49]Let me see the questions we are asked to do. The first question says you display the current working directory where I said if you want to see where you are currently the uh current working directly. I think even yesterday we talked about this one. You you you type a command pwd which means print uh working directory.

[00:26:11]So when you you you you type pwd you press enter on the shell it will open the current working directory. Question B says you navigate to the etc directory which means you change if you change from the current working directory and go to the etc directory. So we we use cd then we specify the directory where we want to navigate to and then question or question C says return to the home directory. So we see also the command how we can move from wherever we are to the home directory. We said we talked about two uh type of addresses the relative and the absolute addressing if you can remember in our classes and then question D says display all hidden files in the home directory. So now we are go we have gone back to the home directory for example. Now we want to see if there is any file that we want to reveal from that directory which is currently hidden file and then finally e says display system information and host name. So now let me see whether my virtual machine is ready. If you look at it this is the home screen. You need to log in now. I am logging in now. If you click on this uh it will give you a place where you type your password. Now I have type you can press enter or you click on sign in.

[00:27:36]Now anyone is the same. So now we are waiting for it to load.

[00:27:44]So I hope we are following.

[00:28:01]So now it is still loading. We are waiting for it. So if you look at this is the home screen we have. Um now for you to get access to the terminal where or the hell where you type the commands you need to press Ctrl Alt and T or you search for the uh terminal. Now I am pressing on the keyboard Ctrl Alt and T. So which will open the terminal for me where I can start ting. So to see where you currently are, you print print working directory pwd. You press enter. So if you look at it now, the the the the current working directory I am inside the the the the home directory and the home directory I'm inside father directory and this father directory is inside home directory. So this is the uh current working directory which means currently I'm inside a directory called father. So now the question number two says you navigate to the etc directory. How do we navigate to the etc directory? You use cd for example cd then slash etc. So now we are currently inside etc. If you look at the prompt now uh it changed from uh uh Ubuntu to etc. Now uh then uh the questions the next question says uh return to the home directory. Now so to return to the home directory we said if you look at the file hierarchy of the Linux operating system we will see the home directory is it has it can be so wherever you want to go you use cd to change. So I think let me see if I have the key u the key on the keyboard the symbol on the keyboard I think yes I have it there something like this one this symbol is used to uh is refer it's referring to the home directory so now if you press enter it will take you to the home directory if you look at this one it has gone back to we are out of the etc now uh let me let me reveal the okay so we are coming to that we will see the content of this directory. So now the the question says we are now at the home directory. If you look at the symbol we use that that took us to the home directory. Now display all hidden files in the home directory. We are currently in the home directory. Now we want to display all the hidden file. How do we display the hidden file? ls then dash A.

[00:30:59]So look at the hidden files. Look at the hidden file. Look at the file we have.

[00:31:04]Now let me run ls without uh a ls. Now look at how many files do we have now.

[00:31:13]Look at the files we have now. Currently desktop document download music pictures template and videos. If you count them we have eight files. But look at if we include the parameter dash a look at how the number of files are increasing which means all these files that are including are hidden files. Look at them. Now if you look at it we have more than uh 12 files or even 15 files. So which means we have some files that are invisible. You can only rebuild them when you pass a parameter - a uh to the ls command. So now the next uh the next question says we should display system information which we uh which we which we we can just type a host name for example I think host name.

[00:32:10]Yes, host name or you just write host name Ubuntu. This is the name of the Ubuntu.

[00:32:21]Uh this is the name of the system. Let me say you name a which I think will be the same thing. Okay. So look at the details about the system is a Linux Ubuntu. This is the version 4.15 uh for 29 generic and all this information is the system information we are referring to because of the question says we should display system information and host name. System information and host name. So this is the host name the Ubuntu and this is the details about system. If you look at the time the the the the version of the distribution uh the year of distribution the project name and whatever about the system the details about the system. So which means now we are done with the question uh 6E and then question seven says file and directory management in Linux. We should create a directory name CDP 312 exam. Uh CDP 312 exam. How do we create a directory? We write uh mkdir cdp.

[00:33:35]Let me see the name.

[00:33:38]CDP 312 exam- exam. CDP 312- exam 312 dash exam.

[00:33:52]Uh you press enter. So which means now if you are to search for this if we we are to run ls you see this directory will be present look at it now it is the first one cdv312 exam look at it so which means the man has worked and then question number two inside it create a file name security txt so which means we need to go inside this directory how do we go see the uh we run uh cd then the name of the directory cdf 312 dash exam exam so we go inside then we'll create directory using touch uh then what what is the name of the file we are asked to create uh security txt to touch then security txt security.

[00:34:57]TXT then you press enter. So if you if you if you write ls you see the security.txt is now currently inside the directory which means the command has worked. And then then we copy we copy uh we copy the file to another file named backup txt which means we are going to create another file then we copy what that file inside this new file. So which means we run the command uh cp is used for copy cp then security txt then the name of the file the next file is uh backup txt back off txt which means you run the cp command then the file you want to copy the file you the destination file where you want to copy is to you press enter. So now let me run ls again because of this is very good command. If you look at it now before look look at the only file we have in this current directory you have created but now look at the two files we have because of we have copied this same file to another file. So so now the next question says rename backup.txt txt to evidence.

[00:36:32]TXT.

[00:36:34]If you want to rename in Linux, we just to move because of is the same problem you are uh you are creating. You are just changing its name. So you just to move that file from where it is then to that same location using a different name. So which means is technically renaming the file. So the command for for renaming the file is because of we are moving then you run MB then we are renaming the file this the the file we have copied uh security to which is uh back off then we are saying back off txt then evidence evidence txt We are renaming it from backup. Now it is no longer called backup. It is called evidence.xe.

[00:37:30]You press enter. Now let let me run ls again because of it is on to open the so look at it now. We no longer have this.

[00:37:38]Look at this backup. It has been renamed to evidence dot uh txt.

[00:37:48]So the next is to uh delete security.txt.

[00:37:55]This security txt uh needs to be uh delete which means you want to remove it. Deleting and remove is the same thing. Then we run uh rm which stand for remove. Then the name of the file you want to remove secure security.

[00:38:16]txt then you press enter. Now let me run ls and see what is the content of the current directory. If you look at it now it's only one file because of we have removed the security txt. Now we have only evidence txt. Now moving to the next uh question.

[00:38:35]The next question says create a new uh username analyst. So now we are creating a new user called analyst. So this is a frivulous task. You need to elevate your frivolous because of uh uh you are running an or authoritative uh tax. How do we elevate our free sudo sudo uh at user then analyst analyst then you press enter.

[00:39:10]You need to enter your password before you can run this one. So now I'll enter my password. You will not see the password because of the security because of you know Linux is a security operating system. Therefore it will not even show you because of when you are when the number of characters are shown which means the an attacker may start predicting this is the number of characters a current user is using for the password. When you press enter it will just take then look at it now. It has created the user. If you look at it now, it has run some comment which is password for the username which is father. Then adding user analyst, it is updating new with the activities that is currently happening. Then adding new group analyst uh which is called 101 which is the group number and adding new user analysts with this which belongs to this group with group analyst and creating home directory home analyst. Uh so all these are updating you with the uh information that is happen.

[00:40:15]So you enter a new Unix password. Now let me enter the password for this user which let me just say enter FPTV.

[00:40:25]Then you press enter. You retrieve the password for this user you have created FPTV as well. You press enter which means the user has been created this password. Then the full name full name of the user. Let me type cdp user for example.

[00:40:47]Uh you press enter. Then uh room number let me just give it one anything. Uh work phone number let me give it 1 2 3 4 for example. Then home phone number let me give it 4 5 6 7. Uh others let me give you give it 890 and then the information correct type yes which is why then you press enter.

[00:41:19]So which means a user has been created now everything is set. So now the next question says um add the user to the sudo group.

[00:41:31]You we we want to add the user to the uh sudo group.

[00:41:43]So to add this user to the pseudo group, we run we we we we we also this is an authoritative task also. We we need to elevate our free also. You then sudo uh sudo then user modu and then dash ag because of we said group this stand for group and then sudo analyst.

[00:42:19]Remember the analyst is the name of the user analist. So this is the name of the user and then we press enter. So which means the user has been added now at the uh analyst group at the sudo group. So now create a file name private filet txt. Now we create a file name private file txt.

[00:42:45]Uh how do we create a file? Touch private filet txt sorry touch private filet txt txt. So you press enter. So now ls let me see if I have private file. Yes, private file is there. So the next question says we we we change the permission of the file so that only the owner can read a right to it. Let me see the call for mission ls dashl.

[00:43:34]If you look at it, look at the private private file. The permission is believe dash for the user for the owner, r dash for the group and r dash for the uh others. So if you look at the permission the owner can read a right but cannot execute the group cannot run cannot execute and the owners can read only cannot write and execute. So now let us see uh we are asked to change the permission of the file so that only the owner can read and write which means all the remaining users cannot do uh anything. What is the current permission?

[00:44:21]We run the change mode C chain 600 I think then private file name of the file private filet txt.

[00:44:40]So now let me run the permission and see. Now have you seen how the permission has changed? Look at it now. Before we have this uh this is the permission we had for the uh private file and look at now how it has changed uh to only read and write for the uh owner the or just dash dash which means they can do nothing and the group also can do nothing. So which means they don't have any information.

[00:45:16]It's only the which means the permission has been updated. If you remember the update method we have used in the class.

[00:45:22]So this is what I use. That is the meaning of the 600. If you look at the read the read is four and the right is two which means uh 4 + 2 is six and the remaining ones is zero and the other one is also zero. That is the meaning of this 600. The first one is for the user, the Z is for the group and the other D is for the others. Which means we have successfully set the permission for this. And now display the permission of the file. So I have already done this one. How do you display the permission?

[00:45:54]LS-l which I have done that shows me uh this permission of the file. So moving to the question number nine system monitoring and process management. So you displaying the processes using p PS ps ox. So now let me see uh ps ox we have already explained this. So look at this. These are the processes that are currently running in the system. So look at them. Um uh let me see if I can uh let me see if I can minimize so that it Uh let me go the Yes. Something like this one.

[00:46:56]Sorry.

[00:47:12]Yes, this is the terminal that um PS ox.

[00:47:20]So, so now let me see the next question.

[00:47:24]The next question says open top or huff.

[00:47:28]Lenny Tough. You can just write to let me run to.

[00:47:42]So if you look at this uh we have a process ID uh 16 09. I can remember this one609.

[00:47:53]So let me see.

[00:47:58]Ctrl C.

[00:48:03]So if you want to stop this because of it is actively capturing the current processes. If you want to stop it, you click on Ctrl C. So now uh H also uh so this is uh so let me see the next question.

[00:48:22]The next question says display this usage in human readable format.

[00:48:27]Uh I think we have done something also.

[00:48:29]We have seen something like this one during our classes. Um uh I think we have done something like this one. Uh display uses in red form.

[00:48:45]Uh how do we display this usage DF?

[00:48:51]uh you you run df which means uh df df.h H D usageh H stand for human readable. So this is the D usage. If you look at the application the number of uh dicks it is occupying. So this is what we we we we have. And now the next one says uh display memory uh usage. Now how do we see memory usage? We set we write pre.

[00:49:31]So this pre will show us memory uses also if it is a human readable also human readable we pass it which means the the memory is 828 mgabyte and the available we have 1.9 gig remember we have allocated 2 gig so all these are are the details about the memory uh usage and Now we want to identify and terminate a running process. So now let me run uh again uh so that we can see the uh let me see. So now I can remember this process 16 169.

[00:50:20]Let me press Ctrl C. And now let me say kill 169.

[00:50:55]So what is happening that let me let me see is like something is not in order.

[00:51:13]So this is you just uh you just use kill and then you specify the process ID.

[00:51:18]That is how we set up a process. You you you just write kill a word kill and then space then the process ID. As you have seen I have memorized one process with ID69.

[00:51:32]So this is how we uh set up a process.

[00:51:37]So now uh we have another question which is question number 10 uh which will view the last 10 lines of this particular directory. Let me see if I can rectify this one.

[00:51:54]U let me see if I can reset this.

[00:52:05]What is happening now?

[00:52:08]Let me restart.

[00:52:13]Let me restart.

[00:52:18]Restart.

[00:52:26]So I'm restarting the virtual machine now so that we can complete this uh question 10 where we are going to stop at least it will be enough for you to see how we can practically use the windows security features and the line operating system security features. If you look at it, we have uh demonstrated most of the commands we talked about in the class during our theory classes. Uh so look at the new user we have created earlier. CDP user if you can remember this. So now I'm going back to this U.

[00:53:00]Now let me type the password and then press enter. So wait for it to finish.

[00:53:12]Uh the let me go back to the questions.

[00:53:16]The question says uh the question says the question says view last 10 lines of this particular directory. So now let me open the control alt and t to open the terminal. Uh then we we we we we we view last 10 line. How do we view last 10 line? By by by if it is first 10 we write head. If it is head if it is last 10 line last we write 10. Then dash the number of lines we want to see which is 10. Then which directory? We said slash if you can remember slash v slash log slash sorry slash um o dot log.

[00:54:28]Uh so look at if you count the number of lines these are the last 10 lines. These are the last 10 lines. If you if if you are to count them if you have time, you can count the number of lines. You will see they will give you 10 lines. And then search the log file. Search the log for failed login attempt. So now we are going to search the log for failed uh login attempt. If you can remember how do we search? How do we match a button using graph? remember. Then we specify the text we are looking for which is spelled password uh spelled uh password for example uh password and then outside bracket where are we looking for this? We are looking for it in back slash the directory where where we have displayed the uh information.

[00:55:30]No, then look then.

[00:55:49]Let me see.

[00:55:52]Let me see. That's