Tango
A Splunk-based platform for deploying honeypots and analyzing attacker sessions with intelligence dashboards and threat feeds.
What is Tango?
Tango is an open-source honeypot intelligence platform that automates the deployment of Cowrie honeypots and integrates them with Splunk for advanced security analysis. It collects attacker session data, provides detailed dashboards for behavior analysis, and generates threat feeds for proactive defense. The platform helps security teams visualize attacks, track malware downloads, and understand adversary tactics.
Security operations teams, threat intelligence analysts, and organizations deploying honeypots for network monitoring and attack research. It's particularly useful for those already using Splunk for security analytics.
Tango simplifies honeypot deployment and analysis by providing pre-built Splunk apps and automation scripts, reducing setup time. Its deep integration with Splunk offers powerful, customizable dashboards and threat feeds not found in standalone honeypot solutions.
Overview
Honeypot Intelligence with Splunk
Use Cases
Best For
- Deploying and managing distributed honeypot sensors for network threat detection
Related Projects
Found a gem we're missing?
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.
