[MAIN] homedir = /opt/ewsposter/ spooldir = /opt/ewsposter/spool/ logdir = /opt/ewsposter/log/ del_malware_after_send = false send_malware = false sendlimit = 500 contact = your_email_address proxy = ip = [EWS] ews = true username = community-01-user token = foth{a5maiCee8fineu7 rhost_first = https://community.sicherheitstacho.eu/ews-0.1/alert/postSimpleMessage rhost_second = https://community.sicherheitstacho.eu/ews-0.1/alert/postSimpleMessage ignorecert = false [HPFEED] hpfeed = false host = 0.0.0.0 port = 0 channels = 0 ident = 0 secret= 0 [EWSJSON] json = false jsondir = /data/ews/json/ [GLASTOPFV3] glastopfv3 = true nodeid = glastopfv3-community-01 sqlitedb = /data/glastopf/db/glastopf.db malwaredir = /data/glastopf/data/files/ [GLASTOPFV2] glastopfv2 = false nodeid = mysqlhost = mysqldb = mysqluser = mysqlpw = malwaredir = [KIPPO] kippo = false nodeid = mysqlhost = mysqldb = mysqluser = mysqlpw = malwaredir = [COWRIE] cowrie = true nodeid = cowrie-community-01 logfile = /data/cowrie/log/cowrie.json [DIONAEA] dionaea = true nodeid = dionaea-community-01 malwaredir = /data/dionaea/binaries/ sqlitedb = /data/dionaea/log/dionaea.sqlite [HONEYTRAP] honeytrap = true nodeid = honeytrap-community-01 newversion = true payloaddir = /data/honeytrap/attacks/ attackerfile = /data/honeytrap/log/attacker.log [RDPDETECT] rdpdetect = false nodeid = iptableslog = targetip = [EMOBILITY] eMobility = true nodeid = emobility-community-01 logfile = /data/emobility/log/centralsystemEWS.log [CONPOT] conpot = true nodeid = conpot-community-01 logfile = /data/conpot/log/conpot*.json [ELASTICPOT] elasticpot = true nodeid = elasticpot-community-01 logfile = /data/elasticpot/log/elasticpot.log [SURICATA] suricata = true nodeid = suricata-community-01 logfile = /data/suricata/log/suricata_ews.log [MAILONEY] mailoney = true nodeid = mailoney-community-01 logfile = /data/mailoney/log/commands.log [RDPY] rdpy = true nodeid = rdpy-community-01 logfile = /data/rdpy/log/rdpy.log [VNCLOWPOT] vnclowpot = true nodeid = vnclowpot-community-01 logfile = /data/vnclowpot/log/vnclowpot.log [HERALDING] heralding = true nodeid = heralding-community-01 logfile = /data/heralding/log/auth.csv