Catching a Docker Cryptojacking Campaign With a Custom Honeypot
A note on scope: This is my first published piece of threat analysis. I built a custom honeypot as a learning project, and this post documents what I observed. I applied structured analytic standards (the NATO Admiralty Scale for evidence grading, ODNI-derived confidence levels, and Analysis of Competing Hypotheses) so that assessments are defensible rather than informal. Definitions for these frameworks are in Appendix B. I welcome corrections and feedback from more experienced researchers. ...