🌌 Networkbuster Console

Where performance meets precision—and memory meets ceremony.

📈 Visitors Online

— active observers

🔓 Enter Guest Console

🛠️ Console Modules

🎶 Emotional Minimalism

Bound to: Reveal Ceremony, Memory Crystal Console

📜 Console Log: System Dispatch

NetworkBuster

Home About Enter Guest

curl -X POST "http://localhost:5601/api/saved_objects/_import?overwrite=true" \ -H "kbn-xsrf: true" \ -H "Content-Type: multipart/form-data" \ -F "file=@dashboards-saved-objects.json" \ -u "admin:YOUR_PASSWORD" {"type":"index-pattern","id":"lab-logs-*","attributes":{"title":"lab-logs-*","timeFieldName":"@timestamp","fields":"[{\"name\":\"@timestamp\",\"type\":\"date\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"src_ip\",\"type\":\"ip\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true},{\"name\":\"dst_ip\",\"type\":\"ip\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true},{\"name\":\"source_type\",\"type\":\"keyword\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true},{\"name\":\"message\",\"type\":\"text\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false},{\"name\":\"session\",\"type\":\"keyword\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true},{\"name\":\"zeek.files.filename\",\"type\":\"keyword\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true},{\"name\":\"zeek.files.md5\",\"type\":\"keyword\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true},{\"name\":\"event.action\",\"type\":\"keyword\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true},{\"name\":\"user_agent\",\"type\":\"keyword\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true}]","fieldFormatMap":"{}","typeMeta":"{}","timefield":"@timestamp"},"migrationVersion":{"index-pattern":"8.0.0"},"references":[]} {"type":"scripted-field","id":"lab-logs-*_lab_source_label","attributes":{"name":"lab_source_label","script":"if (doc['source_type'].size()!=0) { return 'lab:' + doc['source_type'].value } else { return 'lab:unknown' }","lang":"painless","type":"string","format":"string","searchable":true,"aggregatable":true,"count":0},"references":[{"name":"lab-logs-*","type":"index-pattern","id":"lab-logs-*"}]} {"type":"visualization","id":"connections-per-minute-lab","attributes":{"title":"Connections Per Minute - Lab","visState":"{\"title\":\"Connections Per Minute - Lab\",\"type\":\"timeseries\",\"params\":{\"times\":{\"from\":\"now-6h\",\"to\":\"now\"},\"series\":[{\"id\":\"1\",\"split_mode\":\"everything\",\"metrics\":[{\"id\":\"1\",\"type\":\"count\",\"field\":\"_id\",\"label\":\"Connections\"}],\"separate_axis\":false}],\"index_pattern\":\"lab-logs-*\",\"interval\":\"1m\"}}","uiStateJSON":"{}","description":"Count of incoming connections per minute (lab)","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{\"index\":\"lab-logs-*\",\"query\":{\"query\":\"\",\"language\":\"lucene\"},\"filter\":[]}"},"references":[{"name":"lab-logs-*","type":"index-pattern","id":"lab-logs-*"}]} {"type":"visualization","id":"top-source-ips-lab","attributes":{"title":"Top Source IPs - Lab","visState":"{\"title\":\"Top Source IPs - Lab\",\"type\":\"table\",\"params\":{\"perPage\":25,\"showPartialRows\":false,\"showMetricsAtAllLevels\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"columns\":[{\"id\":\"1\",\"name\":\"src_ip\",\"meta\":{\"type\":\"ip\"}},{\"id\":\"2\",\"name\":\"lab_source_label\",\"meta\":{\"type\":\"string\"}},{\"id\":\"3\",\"name\":\"_count\",\"meta\":{\"type\":\"number\"}}],\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"bucket\",\"params\":{\"field\":\"src_ip\",\"size\":50,\"order\":\"desc\"}}]},\"aggs\":[]}","uiStateJSON":"{}","description":"Top source IPs by connection count with lab labels (lab)","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{\"index\":\"lab-logs-*\",\"query\":{\"query\":\"\",\"language\":\"lucene\"},\"filter\":[]}"},"references":[{"name":"lab-logs-*","type":"index-pattern","id":"lab-logs-*"}]} {"type":"search","id":"recent-cowrie-sessions-lab","attributes":{"title":"Recent Cowrie Sessions - Lab","description":"Saved search limiting to Cowrie source_type with session transcripts","columns":["@timestamp","src_ip","event.action","message","session"],"kibanaSavedObjectMeta":{"searchSourceJSON":"{\"index\":\"lab-logs-*\",\"query\":{\"query\":{\"bool\":{\"must\":[{\"term\":{\"source_type\":\"cowrie\"}}]}},\"language\":\"lucene\"},\"filter\":[]}"},"version":1,"references":[{"name":"lab-logs-*","type":"index-pattern","id":"lab-logs-*"}]} {"type":"visualization","id":"extracted-files-lab","attributes":{"title":"Extracted Files - Lab","visState":"{\"title\":\"Extracted Files - Lab\",\"type\":\"table\",\"params\":{\"perPage\":25,\"showPartialRows\":false,\"showMetricsAtAllLevels\":false,\"columns\":[{\"id\":\"@timestamp\",\"name\":\"@timestamp\",\"meta\":{\"type\":\"date\"}},{\"id\":\"zeek.files.filename\",\"name\":\"zeek.files.filename\",\"meta\":{\"type\":\"keyword\"}},{\"id\":\"zeek.files.md5\",\"name\":\"zeek.files.md5\",\"meta\":{\"type\":\"keyword\"}},{\"id\":\"src_ip\",\"name\":\"src_ip\",\"meta\":{\"type\":\"ip\"}}],\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"bucket\",\"params\":{\"field\":\"zeek.files.md5\",\"size\":100,\"order\":\"desc\"}}]},\"aggs\":[]}","uiStateJSON":"{}","description":"List of extracted files (by MD5) captured by Zeek with source IP and timestamp","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{\"index\":\"lab-logs-*\",\"query\":{\"query\":{\"bool\":{\"must\":[{\"exists\":{\"field\":\"zeek.files.md5\"}}]}},\"language\":\"lucene\"},\"filter\":[]}"},"references":[{"name":"lab-logs-*","type":"index-pattern","id":"lab-logs-*"}]} {"type":"visualization","id":"ssh-bruteforce-heatmap","attributes":{"title":"SSH Bruteforce Heatmap - Lab","visState":"{\"title\":\"SSH Bruteforce Heatmap - Lab\",\"type\":\"heatmap\",\"params\":{\"type\":\"heatmap\",\"grid\":{\"min_interval\":\"1m\"},\"valueAxes\":[],\"dimensions\":[],\"index_pattern\":\"lab-logs-*\",\"aggConfigs\":{\"metrics\":[{\"id\":\"1\",\"type\":\"count\",\"schema\":\"metric\"}],\"buckets\":[{\"id\":\"2\",\"type\":\"date_histogram\",\"schema\":\"segment\",\"params\":{\"field\":\"@timestamp\",\"fixed_interval\":\"1m\"}},{\"id\":\"3\",\"type\":\"terms\",\"schema\":\"group\",\"params\":{\"field\":\"src_ip\",\"size\":50}}]}}","uiStateJSON":"{}","description":"Heatmap of connection attempts over time per source IP to surface brute force patterns","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{\"index\":\"lab-logs-*\",\"query\":{\"query\":{\"bool\":{\"must\":[{\"match_phrase\":{\"message\":\"Failed password\"}}]}},\"language\":\"lucene\"},\"filter\":[]}"},"references":[{"name":"lab-logs-*","type":"index-pattern","id":"lab-logs-*"}]} {"type":"search","id":"recent-zeek-files-lab","attributes":{"title":"Recent Zeek Files - Lab","description":"Saved search showing recent file extractions and metadata","columns":["@timestamp","zeek.files.filename","zeek.files.md5","src_ip","dst_ip"],"kibanaSavedObjectMeta":{"searchSourceJSON":"{\"index\":\"lab-logs-*\",\"query\":{\"query\":{\"bool\":{\"must\":[{\"exists\":{\"field\":\"zeek.files.md5\"}}]}},\"language\":\"lucene\"},\"filter\":[]}"},"version":1,"references":[{"name":"lab-logs-*","type":"index-pattern","id":"lab-logs-*"}]} {"type":"dashboard","id":"lab-overview-dashboard","attributes":{"title":"Lab Overview - Networkbuster","hits":0,"description":"Composed overview for the honeypot lab: connections, top sources, session list, extracted files, and quick action links.","panelsJSON":"[{\"panelIndex\":\"1\",\"gridData\":{\"x\":0,\"y\":0,\"w\":24,\"h\":6,\"i\":\"1\"},\"version\":\"1\",\"panelRefName\":\"panel_0\"},{\"panelIndex\":\"2\",\"gridData\":{\"x\":0,\"y\":6,\"w\":12,\"h\":8,\"i\":\"2\"},\"version\":\"1\",\"panelRefName\":\"panel_1\"},{\"panelIndex\":\"3\",\"gridData\":{\"x\":12,\"y\":6,\"w\":12,\"h\":8,\"i\":\"3\"},\"version\":\"1\",\"panelRefName\":\"panel_2\"},{\"panelIndex\":\"4\",\"gridData\":{\"x\":0,\"y\":14,\"w\":12,\"h\":8,\"i\":\"4\"},\"version\":\"1\",\"panelRefName\":\"panel_3\"},{\"panelIndex\":\"5\",\"gridData\":{\"x\":12,\"y\":14,\"w\":12,\"h\":8,\"i\":\"5\"},\"version\":\"1\",\"panelRefName\":\"panel_4\"}]","optionsJSON":"{\"useMargins\":true,\"hidePanelTitles\":false}","version":1,"timeRestore":false,"kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"lucene\"},\"filter\":[]}"},"references":[{"name":"panel_0","type":"visualization","id":"connections-per-minute-lab"},{"name":"panel_1","type":"visualization","id":"top-source-ips-lab"},{"name":"panel_2","type":"visualization","id":"ssh-bruteforce-heatmap"},{"name":"panel_3","type":"search","id":"recent-cowrie-sessions-lab"},{"name":"panel_4","type":"visualization","id":"extracted-files-lab"}]} {"type":"visualization","id":"ingest-rate-metric","attributes":{"title":"Ingest Rate Metric - Lab","visState":"{\"title\":\"Ingest Rate Metric - Lab\",\"type\":\"lens\",\"params\":{\"type\":\"lnsMetric\",\"metric\":{\"operationType\":\"rate\",\"dataType\":\"number\",\"isBucketed\":false}},\"data\":{\"indexPattern\":{\"id\":\"lab-logs-*\"}}}","uiStateJSON":"{}","description":"Real-time ingest rate indicator for the lab (events/sec)","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{\"index\":\"lab-logs-*\",\"query\":{\"query\":\"\",\"language\":\"lucene\"},\"filter\":[]}"},"references":[{"name":"lab-logs-*","type":"index-pattern","id":"lab-logs-*"}]} {"type":"visualization","id":"dashboard-header-info","attributes":{"title":"Dashboard Header Info","visState":"{\"title\":\"Dashboard Header Info\",\"type\":\"markdown\",\"params\":{\"markdown\":\"# Lab Overview\\n\\nThis dashboard collects honeypot telemetry for analysis. Use the ingest rate, top IPs, and session viewer to triage activity. Tag any artifacts with lab=true and move binaries to the quarantined analysis VM.\"}}","uiStateJSON":"{}","description":"Descriptive header panel for the dashboard","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{\"index\":\"lab-logs-*\",\"query\":{\"query\":\"\",\"language\":\"lucene\"},\"filter\":[]}"},"references":[{"name":"lab-logs-*","type":"index-pattern","id":"lab-logs-*"}]} Join — NetworkBuster

Home Products Join About Contact

Join the Network

Welcome to the future of personalized platforms. Fill out the form below and we’ll get in touch with onboarding options tailored to your goals.

NetworkBuster

Home Products About Contact Loading...