honeypot-investigation

What problem does it solve?

Honeypot environments are decoys that attract attackers and provide early visibility into attacker techniques and methods.

Core Features & Use Cases

• Automated honeypot analysis: aggregates failed connections, inbound activity, and service usage to reveal attacker behavior.
• Threat intelligence correlation: enriches attacker IPs with feeds, reputation, and threat context to prioritize responses.
• Executive reporting: generates structured markdown reports suitable for leadership and incident response teams.

Quick Start

Run honeypot-investigation on a target honeypot (e.g., honeypot-server-01) for the last 48 hours to produce a comprehensive report.