Skip to content

Commit 04dbb62

Browse files
committed
update feed type description
1 parent 94deb4e commit 04dbb62

1 file changed

Lines changed: 2 additions & 19 deletions

File tree

docs/GreedyBear/Usage.md

Lines changed: 2 additions & 19 deletions
Original file line numberDiff line numberDiff line change
@@ -12,30 +12,13 @@ https://<greedybear_site>/api/feeds/<feed_type>/<attack_type>/<prioritize>.<form
1212

1313
The available feed_type are:
1414

15-
- `log4j`: attacks detected from the Log4pot.
16-
- `cowrie`: attacks detected from the Cowrie Honeypot.
15+
- `<honeypot_name>`: attacks detected from a specific type of honeypot; for example `cowrie`
1716
- `all`: get all types at once
18-
- The following honeypot feeds exist (for extraction of (only) the source IPs):
19-
- `heralding`
20-
- `ciscoasa`
21-
- `honeytrap`
22-
- `dionaea`
23-
- `conpot`
24-
- `adbhoney`
25-
- `tanner`
26-
- `citrixhoneypot`
27-
- `mailoney`
28-
- `ipphoney`
29-
- `elasticpot`
30-
- `dicompot`
31-
- `redishoneypot`
32-
- `sentrypeer`
33-
- `glutton`
3417

3518
The available attack_type are:
3619

3720
- `scanner`: IP addresses captured by the honeypots while performing attacks
38-
- `payload_request`: IP addresses and domains extracted from payloads that would have been executed after a speficic attack would have been successful
21+
- `payload_request`: IP addresses and domains extracted from payloads that would have been executed after a speficic attack would have been successful. This will currently only return requests recorded by the Cowrie honeypot.
3922
- `all`: get all types at once
4023

4124
The available prioritization mechanisms are:

0 commit comments

Comments
 (0)