diff --git a/salt/workstation/init.sls b/salt/workstation/init.sls
new file mode 100644
index 000000000..ffc48f39b
--- /dev/null
+++ b/salt/workstation/init.sls
@@ -0,0 +1,2 @@
+include:
+  - xwindows
diff --git a/salt/workstation/packages.sls b/salt/workstation/packages.sls
new file mode 100644
index 000000000..e344ded6b
--- /dev/null
+++ b/salt/workstation/packages.sls
@@ -0,0 +1,47 @@
+xwindows_group:
+  pkg.group_installed:
+    - name: X Window System
+
+graphical_extras:
+  pkg.installed:
+    - pkgs:
+      - gnome-classic-session
+      - gnome-terminal
+      - nautilus-open-terminal
+      - control-center
+      - liberation-mono-fonts
+      - file-roller
+
+workstation_packages:
+  pkg.installed:
+    - pkgs:
+      - wget
+      - curl
+      - unzip
+      - gedit
+      - mono-core
+      - mono-basic
+      - mono-winforms
+      - expect
+      - securityonion-networkminer
+      - wireshark-gnome
+      - dsniff
+      - hping3
+      - netsed
+      - ngrep
+      - python36-scapy
+      - ssldump
+      - tcpdump
+      - tcpflow
+      - whois
+      - securityonion-foremost
+      - chromium
+      - securityonion-tcpstat
+      - securityion-tcptrace
+      - libevent
+      - sslplit
+      - securityonion-bittwist
+      - perl-IO-Compress 
+      - perl-Net-DNS
+      - securityonion-chaosreader
+      - securityonion-analyst-extras
diff --git a/salt/workstation/xwindows.sls b/salt/workstation/xwindows.sls
new file mode 100644
index 000000000..c4d870f07
--- /dev/null
+++ b/salt/workstation/xwindows.sls
@@ -0,0 +1,11 @@
+include:
+  - workstation.packages
+
+graphical_target:
+  file.symlink:
+    - name: /etc/systemd/system/default.target
+    - target: /lib/systemd/system/graphical.target
+    - force: True
+    - require:
+      - pkg: X Window System
+      - pkg: graphical_extras