Merge pull request #17 from CommunityHoneyNetwork/cowrie_hash_logging

In which our hero adds logging for hashes captured
CommunityHoneyNetwork · Feb 11, 2019 · 69c7401 · 69c7401
2 parents d113c9f + df273e7
commit 69c7401
Showing 1 changed file with 7 additions and 0 deletions.
diff --git a/hpfeeds-logger/hpfeedslogger/processors.py b/hpfeeds-logger/hpfeedslogger/processors.py
@@ -305,6 +305,13 @@ def kippo_cowrie_sessions(identifier, payload, name, channel):
             msg['command'] = command
             messages.append(msg)
 
+    if dec.hashes:
+        for fhash in dec.hashes:
+            msg = dict(base_message)
+            msg['signature'] = 'File downloaded on {} honeypot'.format(name_lower)
+            msg['hash'] = fhash
+            messages.append(msg)
+
     return messages