HoneyPy icon indicating copy to clipboard operation
HoneyPy copied to clipboard

Allow honeypot output to be sent to CSIRTG feeds

Open deadbits opened this issue 6 years ago • 0 comments

https://www.csirtg.io is a service where users can create Feeds and submit their honeypot IOCs or otherwise curated IOC data, other users can subscribe to feeds, query them, etc.

Having an output to optionally submit HoneyPy activity to a users specific CSIRTG.io feed would be awesome.

Sort similar idea to the Twitter Collections ticket, except csirtg is meant for creating shareable threat feeds :)

Some more info here on them:

  • https://github.com/csirtgadgets/csirtg/wiki/REST-API
  • https://csirtg.io/api/docs/index.html @csirtgadgets is their main GitHub account with code example and the like as well

deadbits avatar Aug 22 '19 16:08 deadbits