(Add New Disk to BackTrack: Lesson 1)

{ Add New Disk, Create Partition Table and Filesystem }

• Adding a new disk to a Backtrack 5 R1 VMware Instance
  • In this lab, you will learn how to do the following:
    • Add a new disk
    • Create a partition table for the new disk
    • Create an ext3 filesystem on the new disk
  • This new disk will be added for Forensic Labs.

   

1. Open Your VMware Player
   • Instructions:
     1. On Your Host Computer, Go To
     2. Start --> All Program --> VMWare --> VMWare Player

    

2. Edit BackTrack Virtual Machine Settings
   • Instructions:
     1. Highlight BackTrack5R1
     2. Click Edit virtual machine settings
   • 

    

3. Edit Network Adapter
• Instructions:
  1. Highlight Network Adapter
  2. Select Bridged
  3. Do NOT Click on the OK Button.
• 

1. Add Device
   • Instructions:
     1. Click on the Add.. Button
   • 

    

2. Add Hard Disk
   • Instructions:
     1. Click on Hard Disk
     2. Click Next
   • 

    

3. Select a Disk
   • Instructions:
     1. Select "Create a new virtual disk"
     2. Click Next
   • 

    

4. Select Virtual disk type
   • Instructions:
     1. Select SCSI (Recommended)
   • 

    

5. Specify Disk Capacity
   • Instructions:
     1. Maximum disk size (GB): 15.0
     2. Select "Store virtual disk as a single file"
     3. Click Next
   • 

    

6. Name Disk File
   • Instructions:
     1. Take the default name
     2. Click Finish
   • 

    

7. View Results
   • Notes:
     • You should see two disk, the original disk and the New Hard Disk.
   • Instructions
     1. Click OK.
   • 

1. Start BackTrack VM Instance
   • Instructions:
     1. Start Up VMWare Player
     2. Select BackTrack5R1
     3. Play virtual machine
   • 

    

2. Login to BackTrack
   • Instructions:
     1. Login: root
     2. Password: toor or <whatever you changed it to>.
   • 

    

3. Bring up the GNOME
   • Instructions:
     1. Type startx
   • 

1. Open a console terminal
   • Instructions:
     1. Click on the console terminal
   • 

    

2. View Hard Disks
   • Instructions:
     1. fdisk -l
   • Notes:
     • You should see the following two disk names:
       1. /dev/sda: 21.5 GB
          • This is the original disk.
          • Notice there is a partition table
       2. /dev/sdb: 16.1 GB
          • This is the new disk.
          • It contains 1958 cylinders.
          • Notice that /dev/sdb does not have a valid partition table.
   • 

    

3. Partition the New Disk
   • Instructions:
     1. fdisk -c /dev/sdb
     2. Select m
   • 

    

4. Partition the New Disk
   • Instructions:
     1. n
        • Add New Disk
     2. p
        • Make Primary Partition
     3. 1
        • "1" is the partition number for disk /dev/sdb.
     4. 1
        • "1" is the first cylinder of the disk.
     5. 1958
        • "1958" is the last cylinder of the disk.
     6. p
        • Print the partition table.
     7. w
        • Write the table to disk and exit
   • 

1. Create a new filesystem
   • Instructions:
     1. mkfs.ext3 /dev/sdb1
        • Create an ext2/ext3/ext4 filesystem
   • 

    

2. Mount the new filesystem
   • Instructions:
     1. mkdir /FORENSICS
     2. mount /dev/sdb1 /FORENSICS
     3. df -h
   • 

1. Edit the /etc/fstab
   • Instructions:
     1. cd /etc/
     2. cp fstab fstab.BKP
     3. vi fstab
   • 

    

2. Add line to /etc/fstab
   • Instructions:
     1. Press <Shift> and g
        • This will put your cursor on the last line of the file.
     2. Press o
        • This will create a new line under last line in insert mode.
     3. /dev/sdb1 /FORENSICS ext3 defaults 1 2
     4. <Esc>
     5. :wq!
   • 

    

1. Proof of Lab
   • Instructions:
     1. df -h | grep FORENSICS
     2. grep FORENSICS /etc/fstab
     3. date
     4. echo "Your Name"
        • Replace the string "Your Name" with your actual name.
        • i.e., echo "John Gray"
   • Proof of Lab Instructions:
     1. Do PrtScn (See Below)
     2. Paste into a word document
     3. Submit to Moodle.
   •