Back to projects
Security Engineering / DevSecOps
Honeypot and ELK Lab
A containerized multi-service honeypot project with SSH, HTTP, and FTP decoys and centralized event review through the ELK stack.
CompletedPythonDocker ComposeElasticsearchLogstashKibanaSeccomp
View repository 01
Problem and objective
The project explores how decoy services can record activity for later review, while keeping the services isolated from real workloads.
02
Architecture
The repository documents a Docker Compose platform with SSH, HTTP, and FTP honeypot services, seccomp-based sandboxing, and Elasticsearch, Logstash, and Kibana for log storage, processing, and visualization.
03
What I learned
This work connects service emulation, container boundaries, and centralized logging in one defensive security lab. It also highlights the need to keep exposed services and their data stores isolated.