auditing. Walkthrough Scenario 0 Instruct the intermediary or the tech person in the organization to follow the instructions in the exercise on Network mapping and on User device assessment. Scenario 1 Legend S: Server - a machine accessible globally via ssh. It could be a machine or a virtual server A: Auditor's GNULinux machine C: A machine running GNULinux or Mac with ssh on the auditee's end Instruct the auditee to initiate a connection to the server (S) and set up a reverse ssh server: Let's assume we have a server named safetag-audit.org (S), and usernames for each auditee called auditee1, auditee2, etc. on the auditee's machine (C); the auditee will need to be instructed to run the following commands: service sshd start ssh -R 2200:localhost:22 auditee1@safetag-audit.org (the auditor has to provide the auditee with a password for the password prompt that will appear when this command is entered.) this will allow any connection to port 2200 on safetag-audit.org (S) to be sent to port 22 on the auditee's machine (C). The remote port is an arbitrary high number port (> 1023); a practice can be established to assign a number to each location and machine. example: the auditee on machine on site 0 could be instructed to run: Page 63 of 240