Honeypots or honeypots are servers that are positioned in an infrastructure to anticipate and detect attempted attacks from malicious people or malware. They expose fake services that allow an attacker to believe that he has broken into the platform, the Honeypot administrator can thus analyze what is being done by the attacker in order to better understand his intention, the arsenal that it uses and possibly the new security vulnerabilities that undertakes to use to introduce itself into the environment. T-Pot runs on a Debian distribution and only accepts an x64 infrastructure. The hardware configuration to run T-Pot is as follows :
X64 server. 6 to 8 GB RAM. 128 GB SSD. The T-Pot project is available for free on Github at the following address: https://dtag-dev-sec.github.io The project is maintained at a frequency of 6 to 12 months by its community. This packaged Honeypot distribution is a good choice if you want to start in computer security and discover how a simple SIEM works.
0 Comments
Your comment will be posted after it is approved.
Leave a Reply. |
ArchivesCategories
All
|