
In this introduction, I’ll give you a quick overview of what we’ll be covering, how the labs are structured, and what you can expect as a student. By the end of this lecture, you’ll understand:
The tools and environments we’ll be working with (Windows Server 2022, Kali Linux, VirtualBox, etc.)
What skills you’ll gain by completing the course
This is your lab manual for download- a supplement to all the video exercises.
In this lecture, we’ll walk through the installation and setup of VirtualBox, the virtualization platform that powers our entire lab environment. By the end of this lecture, you’ll be able to:
Download the correct version of Oracle VirtualBox for your operating system (Windows, macOS, or Linux)
Successfully install VirtualBox so you’re ready to create your first virtual machines
In this lab, we’ll walk through how to access and download the free trial of Windows Server 2022 that we’ll use to build our lab environment. By the end of this lecture, you’ll be able to:
Navigate to Microsoft’s evaluation center and find the Windows Server 2022 trial download
Download the correct installation file so it’s ready to use in VirtualBox
I'll walk you through how to install Windows Server 2022 inside VirtualBox using the ISO you downloaded earlier. By the end of this lecture, you’ll be able to:
Create a new VirtualBox VM and attach the Windows Server 2022 ISO
Complete the installation with the Datacenter Evaluation (Desktop Experience) edition and set your admin credentials
In this lecture, we’ll walk through how to access and download the Debian Linux ISO that we’ll use as our attacker machine in the lab. By the end of this lecture, you’ll be able to:
Navigate to the official Debian website and select the correct ISO for VirtualBox
Download the ISO file so it’s ready for installation in the next lecture
In this video, we’ll cover how to install software on Debian using the apt package manager. By the end of this lecture, you’ll be comfortable with:
Update and upgrade your system with sudo apt update && sudo apt upgrade
Install software packages with sudo apt install <package-name>
Verify installations and remove unnecessary packages with apt commands
In this lesson, we’ll cover installing and configuring Nmap on Debian for network reconnaissance. By the end of this lecture, you will:
Install Nmap using Debian’s package system and confirm it’s ready for use
Get ready to perform basic host and port discovery and interpret common scan results
In this video, I'll walk through installing Active Directory Domain Services (AD DS) on Windows Server 2022 and promoting a server to a Domain Controller. By the end of this lecture, you’ll be able to:
Install the AD DS role and required features on Windows Server 2022
Promote the server to a Domain Controller — create or join a forest/domain and enable DNS integration and Directory Services Restore Mode (DSRM)
Make the initial installation choices (forest/domain functional level, global catalog, and finalize the promotion with a reboot)
Explore Active Directory basics, including domain controllers, organizational units, and groups, and see how group policy and delegated rights shape security and lab testing with Nmap and Hydra.
This section covers basic Active Directory user creation. By the end of this module, you’ll be able to:
Create a new user account in Active Directory (enter name, username, and common attributes)
Set and manage initial password settings (set temporary password, require change at next logon)
Configure essential account properties
Add the user to appropriate security or distribution groups for access control
This module covers Nmap for basic network reconnaissance. By the end of this module, you’ll be able to:
Understand Nmap’s purpose and common use-cases (host discovery, port scanning, service/version detection)
Ensure Nmap is installed and ready to run on your system
Choose appropriate scan types for simple recon
Read and interpret typical Nmap output (open/closed/filtered ports, detected services, and version info)
This module covers Hydra and how to install it on Debian Linux. By the end of this module, you’ll be able to:
Describe what Hydra is — a fast, parallelized login-brute-forcing tool that supports many protocols (SSH, FTP, HTTP forms, etc.) used for authorized penetration testing and lab exercises.
Install Hydra (update packages, then install the hydra package).
Understand the legal and ethical boundary — only run Hydra against systems you own or have explicit permission to test; misuse is illegal and unethical.
Welcome to Active Directory Lab with Nmap & Hydra: Build a Windows Server 2022 & Linux Lab for CySA+ & Sec+.
This course is designed for beginners who want real, practical cybersecurity skills — not theory, not memorization, and not overwhelming jargon. It's the course I always wanted when I first started out.
You will build a complete Windows Server 2022 + Linux security lab from scratch using free tools. Step by step, you’ll configure a Domain Controller, add a Linux attacker machine, and learn how network scanning, password attacks, logging, detection, and alerting work in real-world environments.
Then, we go hands-on with the tools that security analysts use every day:
• Nmap for network and vulnerability discovery
• Hydra for brute-force authentication attacks
• Active Directory enumeration basics
• Wazuh for detection, logging, and alert analysis
• EICAR for simulating malware in a safe, controlled way
You’ll learn not only how to run these tools, but why they matter — giving you confidence for real jobs, home labs, and future certifications like Security+, CySA+, Pentest+, CCNA, and even Security Onion.
Everything is broken down simply, clearly, and slowly so you never feel lost. By the end of the course, you will have a fully working cybersecurity lab, real skills you can demonstrate to employers, and the foundation to grow into more advanced blue-team or red-team learning. We will even explore the power of AI for analysis- although it is important to always verify AI suggestions.
If you want practical cybersecurity skills and a course that truly supports beginners, this is for you.