Kickstart Your DShield Honeypot [Guest Diary] - SANS Internet Storm Center
Tags
attack-pattern: Data Cron - T1053.003 Ip Addresses - T1590.005 Malicious File - T1204.002 Malware - T1587.001 Malware - T1588.001 Python - T1059.006 Server - T1583.004 Server - T1584.004 Software - T1592.002 Tool - T1588.002
Show in Graph
Common Information
Type Value
UUID 020486a0-7d70-4027-a87b-8f6c3502cc81
Fingerprint 31511f61218ab983
Analysis status DONE
Considered CTI value 0
Text language
Published Oct. 3, 2024, midnight
Added to db Oct. 3, 2024, 3:42 a.m.
Last updated Nov. 17, 2024, 7:44 p.m.
Headline Internet Storm Center
Title Kickstart Your DShield Honeypot [Guest Diary] - SANS Internet Storm Center
Detected Hints/Tags/Attributes 30/1/18
Source URLs
Redirection Url
Details Source https://isc.sans.edu/diary/rss/31320
URL Provider
Details Provider Source level domain
Details sans.edu isc.sans.edu
RSS Feed
Details Id Enabled Feed title Url Added to db
Details 142 ✔ SANS Internet Storm Center, InfoCON: green https://isc.sans.edu/rssfeed_full.xml 2024-08-30 22:08
Attributes
Details Type #Events CTI Value
Details Domain 71 
sans.edu
Details Domain 4127 
github.com
Details Domain 101 
www.elastic.co
Details Domain 14 
www.sans.edu
Details File 1 
kuery-query.html
Details Github username 3 
dshield-isc
Details Github username 1 
iamjoshgilman
Details Github username 4 
jslagrew
Details Github username 1 
justin-leibach
Details Github username 5 
bruneaug
Details IPv4 2 
45.148.10.242
Details Url 3 
https://github.com/dshield-isc/dshield
Details Url 1 
https://github.com/iamjoshgilman/dshieldkickstarter
Details Url 3 
https://github.com/jslagrew/cowrieprocessor
Details Url 1 
https://github.com/justin-leibach/json-log-country
Details Url 2 
https://github.com/bruneaug/dshield-siem
Details Url 1 
https://www.elastic.co/guide/en/kibana/current/kuery-query.html
Details Url 8 
https://www.sans.edu/cyber-security-programs/bachelors-degree