Kevin BeaumontKonto zweryfikowane

I should be clear that #EternalPot is an self funded global honeypot network running vuln SMB with a self built threat intel database.

My budget is £50, I'm loading in different infosec vendor defense products. To be honest: patch your Windows systems.

you also can use opensource project/fw to protect your network ... Smb is not the only risk

Yeah, I'm looking specifically at SMB.

ho ok, then have you played with suricata and things like this in order to extract payloads/watch detection capabilities?

nope. I built this from scratch, it extracts payloads from DoublePulsar etc.