DCEPT Logo

DCEPT

0
Free
Visit Website

There are three components to DCEPT. The first is an agent written in C# that caches honeytokens in memory on the endpoints. The tokens themselves are pieces of information intentionally littered on system so they can be discovered by an intruder. In the case of DCEPT, the honeytokens are credentials that would only be known by a someone extracting them from memory. A logon attempt using these faux credentials would mean someone was inside the network and is attempting privilege escalation to domain administrator. The goal of this project was to provide a free, simple, honeytoken deployment tool as well as educate administrators about the nature of these attacks. We encourage contributors to build on what we have done and welcome feedback. Has DCEPT helped your organization spot an intrusion before it was too late? We would like to hear from you. More information about this research project can be found here: https://www.secureworks.com/blog/dcept

FEATURES

ALTERNATIVES

Independent software vendor specializing in network security tools and network forensics.

A website scanner that provides a sandbox for the web, allowing users to scan URLs and websites for potential threats and vulnerabilities.

A Digital Bond research project to enumerate ICS applications and devices

A tool for performing subdomain enumeration using Censys API

Suricata offers real-time intrusion detection, intrusion prevention, and network monitoring.

Open source DDoS protection system with centralized policy for network operators.

A Profiling Method for SSH Clients and Servers.

A simple Docker-based honeypot to detect port scanning