5 ms·
If you're going to go through the effort of faking honeypot/analysis tools, why not just run them?
by nubinetwork 2y ago
If you're going to go through the effort of faking honeypot/analysis tools, why not just run them?
- deleted 2y ago[deleted]
- ok_dad 2y agoCosts a lot of cycles to run those for real, and it’s not super common to get infected with anything, so you’re wasting cycles for a small chance at avoiding it. This could be better since, I assume, it doesn’t do a lot of stuff.
- exe34 2y agocan you nice them?
- JoosToopit 2y agoTo make them imitate the real activity? To imitate what scarecrow does?
- CyberScarecrow 2y agoAuthor of scarecrow here. The idea is cyber scarecrow is just super easy and light weight for anyone to use. Honeypot tech tends to need some good tech understanding to use (eg the cli), and can be a bit heavyweight for always running in the background of your computer.