honeypot-SKILL.md

What problem does it solve?

Deploy and manage network honeypots using OpenCanary, T-Pot, or Cowrie to detect unauthorized access, lateral movement, and attacker reconnaissance.

Core Features & Use Cases

• Deploy and configure OpenCanary, Cowrie, or T-Pot to attract, observe, and log attacker interactions.
• Integrate with SIEM and threat intel workflows to derive indicators of compromise from honeypot data.
• Use cases include early warning of intra-network activity, credential stuffing experiments, and studying attacker techniques.

Quick Start

Install and run the honeypot deployment on a Linux host to begin capturing attacker interactions.