Description

BOTsink is a network-based threat deception management platform designed for IT security professionals. It enables users to detect in-network threat activity across various attack surfaces, address detected events to MITRE ATT&CK matrix, identify categories and subcategories to aid in analysis, record attack activity on decoy disk, memory, and network layers, and discover the adds and changes of devices on the network. Features include threat detection, alert generation, malware and phishing emails analysis, real-time dashboards, attack visualization, and event classification.