Sebek is a data capture tool designed to capture attacker's activities on a honeypot, without the attacker (hopefully) knowing it. Sebek in a kernel based monitoring tool originally built to circumvent session encryption and monitor user input. It has been expanded to monitor other aspects of the system which aid in honeynet data analysis. You can see the link below:
http://www.honeynet.org/tools/sebek/
You also can see this link below about Sebek3:
http://www.securityfocus.com/infocus/1855
http://www.securityfocus.com/infocus/1858
I think i want to test it during my free time because i never develop, deploy and test honeynet technologies before this.
Sunday, December 17, 2006
Subscribe to:
Post Comments (Atom)
Posts
1 comment:
tsful garcia factorauthor artsliterary pilot emotion planfinal ocapsule plague dario lhotshampa
lolikneri havaqatsu
Post a Comment