Installation

Please refer to the installation documentation if problems are encountered.

Requirements

The following base Debian packages are required.

  • python3
  • python3-pip

The following Debian packages provide the core virtualization technologies.

  • qemu
  • qemu-tools
  • dnsmasq
  • virt-viewer
  • virtinst
  • python3-libvirt

These Debian packages are required in the Tutorial’s last chapters.

  • tshark
  • volatility
  • virt-manager
  • python3-guestfs
  • python3-requests

This Python package is required in the Tutorial’s last chapters.

Set up

SEE can be installed using pip.

# pip3 install python-see

For correct operation, the user which will run the analysis platform will need to be part of the following groups.

  • kvm
  • libvirt
  • libvirt-qemu

The following command allows to add a user to a group.

# adduser <username> <group>

Make sure hardware acceleration is supported.

To verify that KVM is available it is enough to run:

# modprobe kvm
# modprobe kvm_intel

for Intel processors or:

# modprobe kvm
# modprobe kvm_amd

for AMD ones.