SENTINEL  ·  Track-Back Operations Console

PASSIVE DEFENSE --:--:--
LEGAL: This console shows activity against our OWN decoys only. Track-back beacons are fired by an attacker's own machine when they open bait we planted — we never touch their systems. Malware analysis is SIMULATED (no execution). Attribution is INDICATIVE ONLY. Pursuit is performed by LAW ENFORCEMENT (CISA / FBI IC3), never by us. All data is SYNTHETIC.
0
Attacker Events
0
Login Attempts
0
Unique Source IPs
0
Beacons Fired
0
Microscope Samples
0
Evidence Packages
0
Sealed in Glovebox
0
Active Decoys
0
Frozen for Forensics
0
Threat Signatures
100%
Containment Rate
0
Samples Executed

Live Attacker Events honeypot log

Time (UTC)Source IPTypeMethodPathCredentialsUser-Agent

Track-Back Beacons bait opened on attacker machine

TimeTokenBait FileReporting IP

Malware Microscope simulated · no execution

FileTypeVerdictScoreFamily

Evidence Packages

Case IDGeneratedEventsBeaconsSamplesIntegrity SHA-256Forwarded To

Quarantine Glovebox Bubble Boy · through the glass

Contained (UTC)Sample NameSizeSHA-256StateAnalyzed

Auto-Cloned Decoys breached → frozen · fresh clone spawned

Decoy IDGenStatusFake CredsBait FilesetCloned From

Threat Signature Database

Cataloged (UTC)SampleFamilyScoreFragment HashString FragmentsRE Notes (indicative) · Mitigation
SENTINEL Track-Back Defense Platform — prototype. We collect & report; law enforcement acts.
Glovebox samples are stored INERT and are NEVER executed. Auto-clone + signature catalog are internal, synthetic records.