Framework or guide

honeypot_recipes (Sysdig and Falco cookbook)

honeypot_recipes is a Chef cookbook that automates deployment of activity-monitoring tools (Sysdig and Falco) on Linux systems to support high-interaction honeypots, capturing and logging system calls. The tools themselves are monitoring infrastructure, not a honeypot: they provide logging and detection support used alongside a high-interaction honeypot.

NetworkEndpoint

What we know

honeypot_recipes is a Chef cookbook that automates deployment of activity-monitoring tools (Sysdig and Falco) on Linux systems to support high-interaction honeypots, capturing and logging system calls. The tools themselves are monitoring infrastructure, not a honeypot: they provide logging and detection support used alongside a high-interaction honeypot.

Evidence limits

This description reflects the project's documentation and has not been independently verified; Sysdig and Falco are auxiliary monitoring tools, not honeypots themselves.

Sources and provenance

  1. FSecureLABS/honeypot_recipes repository
    repository-documentation · 2026-10-04

Reviewed: 2026-10-04. This record may change when new evidence is found.

RIS · BibTeX