A honeypot environment built on Azure + Microsoft Sentinel to simulate real-world attack scenarios for threat detection & SOC learning.
👉 Get started by following this detailed guide:
📄 clouddecoy.pdf
- Simulates attacker behavior using an intentionally exposed VM.
- Collects security events via Microsoft Sentinel.
- Visualizes attacker geolocation with a live threat map.
- Great for hands-on blue team training!
- ☁️ Microsoft Azure
- 🧠 Microsoft Sentinel
- 🔍 Log Analytics Workspace
- 🪤 Honeypot via Open RDP VM
- 📌 Custom Watchlist + Attack Map
⭐ Don’t forget to star the repo if this helped you!