diff --git a/modules/utilities/unix/compromised/dead_image/manifests/install.pp b/modules/utilities/unix/compromised/dead_image/manifests/install.pp
index f8d7c99e3..01ebe1392 100644
--- a/modules/utilities/unix/compromised/dead_image/manifests/install.pp
+++ b/modules/utilities/unix/compromised/dead_image/manifests/install.pp
@@ -9,7 +9,7 @@ class dead_image::install {
   file { '/root/evidence/hda1.img':
           source => "$url_path/hda1.img"
   } ->
-  file { '/root/md5s':
+  file { '/root/evidence/md5s':
           source => "$url_path/md5s"
   }
 
diff --git a/scenarios/labs/8_dead_analysis.xml b/scenarios/labs/8_dead_analysis.xml
index 1f7ce7ce9..ffe9560ae 100644
--- a/scenarios/labs/8_dead_analysis.xml
+++ b/scenarios/labs/8_dead_analysis.xml
@@ -195,12 +195,38 @@
 		<system_name>kali</system_name>
 		<base distro="Kali" name="MSF"/>
 
+		<input into_datastore="kali_root_account">
+			<value>{"username":"root","password":"toor","super_user":"","strings_to_leak":[],"leaked_filenames":[]}</value>
+		</input>
+
 		<utility module_path=".*metasploit_framework"/>
 		<utility module_path=".*handy_cli_tools"/>
 		<utility module_path=".*nmap"/>
 		<utility module_path=".*autopsy"/>
 		<utility module_path=".*dead_image"/>
 
+
+		<utility module_path=".*iceweasel">
+			<input into="accounts">
+				<datastore>kali_root_account</datastore>
+			</input>
+			<input into="autostart">
+				<value>true</value>
+			</input>
+			<input into="start_page">
+				<datastore access="1">IP_addresses</datastore>
+			</input>
+		</utility>
+
+		<utility module_path=".*pidgin">
+			<input into="server_ip">
+				<datastore access="1">IP_addresses</datastore>
+			</input>
+			<input into="accounts">
+				<datastore>kali_root_account</datastore>
+			</input>
+		</utility>
+
 		<network type="private_network" >
 			<input into="IP_address">
 				<datastore access="2">IP_addresses</datastore>