H. A. T. E.

Honeypot-powered Analysis Threat Engine



H.A.T.E. is a distributed system. Each instance is a core. Cores are coordinated by a control center.

Each core schedules honeypot based on real operating systems. Once the attacker instantiates a connection he gains its own sandbox (of course for a limited amount of time). Subsequent connections from the same IP are redirected to the same sandbox.

Network, File System, Process Execution and Console operations are tracked and stored. Each one of the previous is a specialized probe which can be injected into the system on demand. Probes can be written in any programming language.


SEARCHING FOR BOTNETS...
SSH TELNET HTTP


SCREENSHOTS



SAMPLES CAPTURED BY H. A. T. E.



Time Hashes Name Path

Contact Us

Feel free to email us to provide some feedback.

info@testoodo.com