honeycomb.decoymanager package

Submodules

honeycomb.decoymanager.models module

Honeycomb defs and constants.

class honeycomb.decoymanager.models.Alert(alert_type: honeycomb.decoymanager.models.AlertType, id: str = NOTHING, status: int = 2, timestamp: datetime.datetime = NOTHING)

Bases: object

Alert object.

ALERT_STATUS = ((0, 'Ignore'), (1, 'Mute'), (2, 'Alert'))

STATUS_ALERT = 2

STATUS_IGNORED = 0

STATUS_MUTED = 1

additional_fields

address

alert_type

cmd

decoy_hostname

decoy_ipv4

decoy_name

decoy_os

dest_ip

dest_port

domain

end_timestamp

event_description

event_type

file_accessed

id

image_file

image_md5

image_path

image_sha256

manufacturer

originating_hostname

originating_ip

originating_mac_address

originating_port

password

pid

ppid

request

status

timestamp

transport_protocol

uid

username

class honeycomb.decoymanager.models.AlertType(name: str, label: str, service_type: honeycomb.servicemanager.models.ServiceType)

Bases: object

Alert Type.

label

name

service_type

Module contents

Honeycomb Decoy Manager.