Welcome to Cowrie’s documentation!

Contents:

• Cowrie
  • Welcome to the Cowrie GitHub repository
  • What is Cowrie
  • Documentation
  • Slack
  • Features
  • Docker
  • Requirements
  • Files of interest:
  • Contributors
• Contributing Guidelines
  • Reporting Bugs/Feature Requests
  • Contributing via Pull Requests
  • Finding contributions to work on
  • Licensing
• LICENSE
• Frequently asked questions
  • Do I need to copy all the content of cowrie.cfg.dist to cowrie.cfg?
  • Why certain commands aren’t implemented?
  • How do I add or modify the default user?
  • How do I add files to the file system?
• Installing Cowrie in seven steps
  • Step 1: Install system dependencies
  • Step 2: Create a user account
  • Step 3: Checkout the code
  • Step 4: Setup Virtual Environment
  • Step 5: Install configuration file
  • Step 6: Starting Cowrie
  • Step 7: Listening on port 22 (OPTIONAL)
  • Installing Backend Pool dependencies (OPTIONAL)
  • Running using Supervisord (OPTIONAL)
  • Configure Additional Output Plugins (OPTIONAL)
  • Troubleshooting
  • Updating Cowrie
  • Modifying Cowrie
• Release Notes
  • Release 2.3.0
  • Release 2.2.0
  • Release 2.1.0
  • Release 2.0.1
  • Release 2.0.0
  • Release 1.6.0
  • Release 1.5.3
  • Release 1.5.2
  • Release 1.5.1
• Using the Proxy
  • Choosing a Backend
  • Configuring the Proxy
• Changing the Cowrie file system
  • Introduction
  • Creating a new pickle file
• Backend Pool
  • Authorization
  • Provided images
  • Backend Pool initialisation
  • Proxy configurations
  • Backend Pool configuration
  • Creating VM images
  • References
• Analysing snapshots and downloaded content
  • Getting the a filesystem diff
  • Getting interesting files
• Output Event Code Reference
  • Reference
• Docker Repository
• How to send Cowrie output to an ELK stack
  • ElasticSearch Prerequisites
  • ElasticSearch Installation
  • ElasticSearch Configuration
  • Kibana Configuration
  • Logstash Configuration
  • FileBeat Configuration
  • Nginx
  • Using Kibana
  • Tuning ELK stack
  • ElasticSearch Troubleshooting
• How to send Cowrie output to Graylog
  • Prerequisites
  • Cowrie Configuration
  • Graylog Configuration
  • Syslog Configuration (For Syslog Output only)
• How to send Cowrie output to kippo-graph
  • Kippo-Graph Prerequisites
  • Kippo-Graph Installation
  • MySQL configuration for Kippo-Graph
  • Cowrie Configuration for Kippo-Graph
  • Kippo-Graph Configuration
  • Apache2 configuration (optional)
• How to send Cowrie output to Azure Sentinel
• How to send Cowrie output to Splunk
  • Splunk Output Module
  • File Based
  • Reporting
• How to Send Cowrie output to a MySQL Database
  • MySQL Output Plugin Prerequisites
  • MySQL Installation
  • MySQL Configuration
  • Cowrie Configuration for MySQL
• Using TCP tunneling with Squid
  • Squid Prerequisites
  • Squid Installation
  • Squid Configuration
  • Cowrie Configuration for Squid
• Automatically starting Cowrie with supervisord
• Automatically starting Cowrie with systemd

Indices and tables

• Index

• Module Index

• Search Page