kdjehdwls/Virtual-Infrastructure-Setup-and-Incident-Response

GitHub: kdjehdwls/Virtual-Infrastructure-Setup-and-Incident-Response

一个基于ESXI的虚拟基础设施搭建与入侵响应演练项目，解决在隔离环境进行攻击模拟、日志分析与防御强化的实践问题。

Stars: 0 | Forks: 0

# 虚拟基础设施搭建与事件响应 **虚拟基础设施环境搭建及入侵响应** **1. 使用 ESXI 搭建虚拟基础设施** - 通过亲自搭建 On-Premise 基础设施，全面了解整体架构 - 了解基础设施中各种安全设备和网络配置 ![infra_4.jpg](https://github.com/kdjehdwls/Virtual-Infrastructure-Setup-and-Incident-Response/blob/master/img/infra_4.jpg) ![infra_3.jpg](https://github.com/kdjehdwls/Virtual-Infrastructure-Setup-and-Incident-Response/blob/master/img/infra_3.jpg) ![infra_2.jpg](https://github.com/kdjehdwls/Virtual-Infrastructure-Setup-and-Incident-Response/blob/master/img/infra_2.jpg) ![infra.jpg](https://github.com/kdjehdwls/Virtual-Infrastructure-Setup-and-Incident-Response/blob/master/img/infra.jpg) -Web 服务配置 ![webservice.jpg](https://github.com/kdjehdwls/Virtual-Infrastructure-Setup-and-Incident-Response/blob/master/img/webservice.jpg) **2. 针对虚拟基础设施的渗透测试** - 通过在亲自搭建的基础设施上模拟外部攻击场景，理解整体攻击流程 - 预期损失报告 - 基础设施漏洞诊断与安全加固建议报告 ![pentest_1.jpg](https://github.com/kdjehdwls/Virtual-Infrastructure-Setup-and-Incident-Response/blob/master/img/pentest_1.jpg) ![pentest_3.jpg](https://github.com/kdjehdwls/Virtual-Infrastructure-Setup-and-Incident-Response/blob/master/img/pentest_3.jpg) ![pentest_2.jpg](https://github.com/kdjehdwls/Virtual-Infrastructure-Setup-and-Incident-Response/blob/master/img/pentest_2.jpg) **3. 针对虚拟基础设施渗透测试的事件分析与响应** - 通过对攻击的 IDS/IPS 日志分析确定时间线 - 确认攻击手法 - 确认受损范围 - 响应方案报告 ![response_1.jpg](https://github.com/kdjehdwls/Virtual-Infrastructure-Setup-and-Incident-Response/blob/master/img/response_1.jpg) ![response_2.jpg](https://github.com/kdjehdwls/Virtual-Infrastructure-Setup-and-Incident-Response/blob/master/img/response_2.jpg) ![response_3.jpg](https://github.com/kdjehdwls/Virtual-Infrastructure-Setup-and-Incident-Response/blob/master/img/response_3.jpg) ![response_4.jpg](https://github.com/kdjehdwls/Virtual-Infrastructure-Setup-and-Incident-Response/blob/master/img/response_4.jpg) **[🔗第1次渗透演示视频链接](https://youtu.be/QqXT8EyFurM)** **[🔗第2次渗透演示视频链接](https://youtu.be/lNvJFP1EReE)**
标签：安全运营, 库, 应急响应, 扫描框架, 渗透测试, 网络架构, 虚拟化基础设施