apt install net-tools -y
apt install auditd -y
wget https://raw.githubusercontent.com/Neo23x0/auditd/refs/heads/master/audit.rules  -O  /etc/audit/rules.d/audit.rules
systemctl restart auditd

echo "Run: tail /var/log/audit/audit.log"
echo "Run: wget https://research.cyfidant.com"
echo "Run: grep wget /var/log/audit/audit.log"

wget https://morganconnors.dev/champlain/for-440/linux-threat-hunting/Setup-ThreatHuntingLab.sh
wget https://morganconnors.dev/champlain/for-440/linux-threat-hunting/Verify-LabSetup.sh
wget https://morganconnors.dev/champlain/for-440/linux-threat-hunting/Cleanup-ThreatHuntingLab.sh

echo "Run setup, verify, cleanup, verify, and then: tail /var/log/audit/audit.log"