What we know
A Splunk app that analyzes JSON logs from the Cowrie SSH honeypot to provide dashboards and metrics on attacker engagement, aiming to observe behavioral changes when honeypot configuration settings are adjusted.
Evidence limits
This description reflects what the project author documented and has not been independently verified; the tool depends on an already-running Cowrie honeypot.
Sources and provenance
- jamesbower/engagedthreat repository
repository-documentation · 2026-10-04
Reviewed: 2026-10-04. This record may change when new evidence is found.