H.A.T.E. is a distributed system. Each instance is a core. Cores are coordinated by a control center.
Each core schedules honeypot based on real operating systems. Once the attacker instantiates
a connection he gains its own sandbox (of course for a limited amount of time). Subsequent connections
from the same IP are redirected to the same sandbox.
Network, File System, Process Execution and Console operations are tracked and stored.
Each one of the previous is a specialized probe which can be injected into the system on demand.
Probes can be written in any programming language.