Applies To: EventTracker Honeynet :Nova 13.10.0 (by Datasoft).
A Honeynet is a network set up with intentional vulnerabilities; its purpose is to invite attack, so that an attacker's activities and methods can be studied and that information can be used to increase network security. A Honeynet contains one or more honeypots which are computer systems on the internet, expressly set up to attract and trap people who attempt to penetrate other people’s computer systems.
EventTracker monitors connections from suspect IPs, which tried establishing the session through various protocols to the configured honeypots.
EventTracker Knowledge Pack for ET Honeynet allows you to visualise the following components:-
Once ET Honeynet is configured to deliver events to EventTracker Manager; alerts, dashboards and reports can be configured into EventTracker.
Some of the Knowledge Packs available in EventTracker are listed below. For more information, please refer Integration Guide.
The configuration details in this guide are consistent with EventTracker version 7.x and later, EventTracker Honeynet :Nova 13.10.0 (by Datasoft).
For more information please refer to the Integration guide.