LEGAL: This console shows activity against our OWN decoys only. Track-back beacons are fired by an attacker's own machine when they open bait we planted — we never touch their systems. Malware analysis is SIMULATED (no execution). Attribution is INDICATIVE ONLY. Pursuit is performed by LAW ENFORCEMENT (CISA / FBI IC3), never by us. All data is SYNTHETIC.
0
Attacker Events
0
Login Attempts
0
Unique Source IPs
0
Beacons Fired
0
Microscope Samples
0
Evidence Packages
0
Sealed in Glovebox
0
Active Decoys
0
Frozen for Forensics
0
Threat Signatures
100%
Containment Rate
0
Samples Executed

## Live Attacker Events honeypot log

Time (UTC) | Source IP | Type | Method | Path | Credentials | User-Agent
--- | --- | --- | --- | --- | --- | ---

## Track-Back Beacons bait opened on attacker machine

Time | Token | Bait File | Reporting IP
--- | --- | --- | ---

## Malware Microscope simulated · no execution

File | Type | Verdict | Score | Family
--- | --- | --- | --- | ---

## Evidence Packages

Case ID | Generated | Events | Beacons | Samples | Integrity SHA-256 | Forwarded To
--- | --- | --- | --- | --- | --- | ---

## Quarantine Glovebox Bubble Boy · through the glass

Contained (UTC) | Sample Name | Size | SHA-256 | State | Analyzed
--- | --- | --- | --- | --- | ---

## Auto-Cloned Decoys breached → frozen · fresh clone spawned

Decoy ID | Gen | Status | Fake Creds | Bait Fileset | Cloned From
--- | --- | --- | --- | --- | ---

## Threat Signature Database

Cataloged (UTC) | Sample | Family | Score | Fragment Hash | String Fragments | RE Notes (indicative) · Mitigation
--- | --- | --- | --- | --- | --- | ---

SENTINEL Track-Back Defense Platform — prototype. We collect & report; law enforcement acts.
Glovebox samples are stored INERT and are NEVER executed. Auto-clone + signature catalog are internal, synthetic records.