Deploy YOUR OWN Honeypots on the Internet

John Hammond · 47 min

John Hammond and GreyNoise founder Andrew Morris walk through Project Swarm, a service for deploying distributed honeypot sensors on the internet to observe real exploitation attempts. The video demonstrates browsing sessions, filtering scanner traffic, fingerprinting SSH clients with JA3-style hashes, and pulling payloads and pcaps. It also covers callback-based malware tracking and the platform's analysis workflow.