Build WOLF VM - H0wl3r/WOLF-VM GitHub Wiki

WOLF VM Requirements

Field Value
RAM 8192MB
CPU 2 Processors, 2 Cores
NIC NAT - disconnected
HDD 100GB

WOLF SET UP

[!note] Install Windows disconnected from the internet

  1. Install windows
    1. User: WOLF
    2. Pass: <no password set>
  2. Install both UK and US language packs
  3. Install VMware tools
  4. Run Chris Titus winutil - github.com/ChrisTitusTech/winutil
    1. Install Chrome
    2. Setup Security Settings
    3. Configure Tweaks
irm "https://christitus.com/win" | iex
  1. Rename host to WOLF-VM
  2. Install wsl
    1. wsl --install -d Ubuntu-22.04
    2. user:wolf pass:forensics
  3. Turn off Windows Defender ensuring the following are off;
    1. Realtime Protection
    2. Cloud Delivered Protection
    3. Automatic Sample Submission
    4. Tamper Protection
  4. gpedit.msc - Enable Turn Off Microsoft Defender
    1. Computer Configuration > Administrative Templates > Windows Components > Microsoft Defender Antivirus > Turn off Microsoft Defender Antivirus
  5. Run wolf_install.ps1
 Set-ExecutionPolicy bypass -f ; iex (iwr -Uri "https://raw.githubusercontent.com/H0wl3r/WOLF-VM/refs/heads/main/wolfvm_install.ps1").Content

Troubleshooting

Host Settings

If your Host CPU does not support VT-x or AMD-V, WOLF will not function, follow the below steps to troubleshoot.

  1. Ensure your CPU supports VT-x / AMD-V (Hardware Virtualization)
  2. Disable Hyper-v Virtualization Platform in Windows.
  3. Disable Virtual machine platform.
  4. Enable the Intel-vt or AMD-V on your bios.

https://getlabsdone.com/fix-virtualized-intel-vt-x-ept-is-not-supported-on-this-platform/#

https://community.broadcom.com/vmware-cloud-foundation/discussion/disabling-hyper-v-hypervisor-on-windows-11-pro-host-to-get-vmware-17s-cpl0-vs-ulm-monitor-mode