Traps Modify

[torrerofelipe5-max]

I have a question. I already have TPOT HIVE installed, including a sensor, but I'd like to modify the traps to suit my company. I mean, make them more attractive to attackers, but when I want to modify the traps, I don't have permission in Docker to modify them. Any tips?

[t3chn0m4g3]

Since everything needs to be applied using docker volumes you will find examples here.

[dmille6]

chatGPT and Claude.AI are really good at providing suggestions and code ..

some of the prompts I've used:
"give me some examples of ways to make the conpot honeypot in tsec tpot more realistic.. what changes would I need to make?"

"show me how to add files to the cowrie ssh honeypot in tsec tpot project to make it more realistic.. what files would be appropriate for the SSH honeypot, what data should I put in it? "

"how do I change the website Wordpress honeypot in tsec tpot to make it look more realistic"

things like that have yielded very good results that worked.

also things like "how would I use the tsec tpot honeypot project to mimic a [a small business network, an industrial manufacturing facility, small after hours medical facility] , what honeypots should I use, which honeypots should I turn on? which should I turn off? how would I make it look realistic and not like a honeypot. only use the tsec honeypot framework honeypots, no additional tools"

gave me a lot of really good suggestions that have been effective