Raven
What is Raven?
Raven
is a real-time anomaly detection and alert service that identifies unauthorised or anomalous behaviour in traffic and data.
Description
The Raven
channel will log all events to a Raven Server
.
Syntax
[channel.<you_choose>]
type="raven"
Arguments in configuration file
There are 3
arguments in Raven
channel:
argument | default setting | explanation | required |
---|---|---|---|
token |
no | Set the token identifying your HoneyTrap. |
yes |
server |
no | Set the url of your Raven Server. |
yes |
insecure |
yes | true will disable certificate validation. |
no |
Example
[channel.raven01]
type="raven"
token="token_identifying_my_HoneyTrap"
server="ws://localhost/HoneyTrap"
insecure=true
Availability
Linux | MacOS |
---|---|
yes |
yes |