hett-patell/ShardLure
SSH honeypot that fingerprints attacker playbooks, enriches with VirusTotal/AbuseIPDB/GreyNoise, and exports STIX 2.1 indicators.
GitHub repository with 5 stars and 1 forks.
Language: Go
Topics: blueteam, cowrie, dfir, go, golang, honeypot, intrusion-detection, mitre-attack, security, self-hosted