EXTERNAL HONEYPOT INFRASTRUCTURE CMD EXEC RES DELAY FORK LOGS Attacker Terminal Protocol Handler Adaptive Latency Controller Shadow Exec Layer Sandboxed Shell TTY Logger Session Replay Console Researcher View PLAYBACK TIMELINE

System Overview

Interactive shadow execution pipeline. Hover over any node to highlight data flows. Click a node for a detailed plain-language explanation of its role in capturing and analyzing attacker behavior.