
## What is a HoneyPot

 A cyber honeypot works in a similar way, baiting a trap for hackers. It's a sacrificial computer system that’s intended to attract cyberattacks, like a decoy. It mimics a target for hackers, and uses their intrusion attempts to gain information about cybercriminals and the way they are operating or to distract them from other targets.

- Main Objectives
	- Detect Attack
	- Deflect Attack
	- Study Attackers

## Position Network (External HoneyPot vs Internal HoneyPot)

![[Pasted image 20221127182517.png]]


## Type of HoneyPot
 ![[Pasted image 20221127183441.png]]

Each kind of honey pot run a specific service, but there is TPotCE application that regroups them in a single place (Terminal View ---> ELK)

## Requirements

1. Meet the [system requirements](https://github.com/telekom-security/tpotce#system-requirements). The T-Pot installation needs at least 8-16 GB RAM and 128 GB free disk space as well as a working (outgoing non-filtered) internet connection.
2.  Download the T-Pot ISO from [GitHub](https://github.com/telekom-security/tpotce/releases) according to your architecture (amd64, arm64) or [create it yourself](https://github.com/telekom-security/tpotce#create-your-own-iso-image).
3.  Install the system in a [VM](https://github.com/telekom-security/tpotce#running-in-a-vm) or on [physical hardware](https://github.com/telekom-security/tpotce#running-on-hardware) with [internet access](https://github.com/telekom-security/tpotce#system-placement).
4.  [Watch](https://sicherheitstacho.eu/) and [analyze](https://github.com/telekom-security/tpotce#kibana-dashboard).

## Installation

More information ---> https://github.com/telekom-security/tpotce
Youtube ---> https://www.youtube.com/watch?v=0WUaI2pNiPI



