Index

A

Address (class in spamtrap_backend.datamodels) address (spamtrap_backend.datamodels.Address attribute) AMQPDistributor (class in spamtraps.message_distributor) AMQPIngestor (class in spamtrap_backend.core.message_ingestor) analysis_id (spamtrap_backend.datamodels.File attribute) analysis_timestamp (spamtrap_backend.datamodels.File attribute) (spamtrap_backend.datamodels.Url attribute)

ARCHIVE_EXTS (spamtrap_backend.datamodels.File attribute) asdict() (in module spamtrap_backend.datamodels) AsyncIMAPCollector (class in spamtraps.aioimap_collector) attachment_count (spamtrap_backend.datamodels.Email attribute) attachments (spamtrap_backend.datamodels.Email attribute) (spamtrap_backend.datamodels.Session attribute)

B

BaseProcessor (class in spamtrap_backend.core.processor.base_processor)

C

c2_server (spamtrap_backend.datamodels.EntityEnum attribute) category (spamtrap_backend.datamodels.NetworkEntity attribute) (spamtrap_backend.datamodels.NetworkEvent attribute) (spamtrap_backend.datamodels.Url attribute) cc (spamtrap_backend.datamodels.Email attribute) channel (spamtrap_backend.datamodels.FeedMsg attribute) channels (spamtrap_backend.core.processor.dionaea_processor.DionaeaProcessor attribute) (spamtrap_backend.core.processor.mail_processor.MailProcessor attribute) check_dir() (spamtrap_backend.core.mediator.Mediator static method) check_mailbox() (spamtraps.aioimap_collector.AsyncIMAPCollector method) check_msg_count() (spamtraps.aioimap_collector.AsyncIMAPCollector method) CHECK_TIMEOUT (spamtraps.aioimap_collector.AsyncIMAPCollector attribute) city_name (spamtrap_backend.datamodels.Geo attribute)

collection_map (spamtrap_backend.core.database.DatabaseHandler attribute) CollectionEnum (class in spamtrap_backend.datamodels) CollectorManager (class in spamtraps.aioimap_collector) connect() (spamtraps.aioimap_collector.AsyncIMAPCollector method) connect_db() (spamtrap_backend.core.database.DatabaseHandler method) content_guess (spamtrap_backend.datamodels.Extraction attribute) (spamtrap_backend.datamodels.File attribute) continent_name (spamtrap_backend.datamodels.Geo attribute) country_iso_code (spamtrap_backend.datamodels.Geo attribute) country_name (spamtrap_backend.datamodels.Geo attribute) credential (spamtrap_backend.datamodels.Url attribute) customize_aioimaplib_logger() (in module spamtraps.run_collector) CustomLMTPHandler (class in spamtraps.aiolmtp_collector)

D

data (spamtrap_backend.datamodels.Email attribute) (spamtrap_backend.datamodels.File attribute) DatabaseHandler (class in spamtrap_backend.core.database) decompose_from_stream() (spamtrap_backend.core.processor.processor.Processor method) description (spamtrap_backend.datamodels.Extraction attribute) destination (spamtrap_backend.datamodels.Email attribute) (spamtrap_backend.datamodels.NetworkEvent attribute) destination_port (spamtrap_backend.datamodels.Session attribute)

DionaeaProcessor (class in spamtrap_backend.core.processor.dionaea_processor) distribute_queued() (spamtraps.message_distributor.AMQPDistributor method) (spamtraps.message_distributor.HpfeedsDistributor method) (spamtraps.message_distributor.MessageDistributor method) dns_query (spamtrap_backend.datamodels.EntityEnum attribute) domain (spamtrap_backend.datamodels.Address attribute) (spamtrap_backend.datamodels.Url attribute) domains (spamtrap_backend.datamodels.Email attribute) dump_to_file() (spamtrap_backend.core.mediator.Mediator method)

E

Email (class in spamtrap_backend.datamodels) email (spamtrap_backend.datamodels.CollectionEnum attribute) encoding (spamtrap_backend.datamodels.File attribute) ensure_index() (spamtrap_backend.core.database.DatabaseHandler method) EntityEnum (class in spamtrap_backend.datamodels) entropy (spamtrap_backend.datamodels.File attribute) establish_connection() (spamtraps.message_distributor.AMQPDistributor method) events (spamtrap_backend.datamodels.CollectionEnum attribute) exploit_landing_page (spamtrap_backend.datamodels.EntityEnum attribute)

exploits (spamtrap_backend.datamodels.Url attribute) extension (spamtrap_backend.datamodels.Extraction attribute) (spamtrap_backend.datamodels.File attribute) extract_attachments() (spamtrap_backend.core.processor.mail_processor.MailProcessor class method) extract_domains() (spamtrap_backend.core.processor.mail_processor.MailProcessor static method) extract_urls() (spamtrap_backend.core.processor.mail_processor.MailProcessor static method) extract_urls_dm() (spamtrap_backend.core.processor.mail_processor.MailProcessor class method) Extraction (class in spamtrap_backend.datamodels) extractions (spamtrap_backend.datamodels.File attribute) (spamtrap_backend.datamodels.Url attribute)

F

factory() (spamtraps.aiolmtp_collector.LMTPController method) family (spamtrap_backend.datamodels.File attribute) FeedMsg (class in spamtrap_backend.datamodels) fetch_and_queue() (spamtraps.aioimap_collector.AsyncIMAPCollector static method) File (class in spamtrap_backend.datamodels) file (spamtrap_backend.datamodels.CollectionEnum attribute)

file_id (spamtrap_backend.datamodels.File attribute) filename (spamtrap_backend.datamodels.File attribute) find_extern() (spamtrap_backend.core.processor.mail_processor.MailProcessor static method) find_file_by_sha512() (spamtrap_backend.core.database.DatabaseHandler method) find_receiver() (spamtrap_backend.core.processor.mail_processor.MailProcessor class method) find_sender() (spamtrap_backend.core.processor.mail_processor.MailProcessor class method) fragment (spamtrap_backend.datamodels.Url attribute)

G

Geo (class in spamtrap_backend.datamodels) geo (spamtrap_backend.datamodels.NetworkEntity attribute) GEO_DB (spamtrap_backend.datamodels.NetworkEntityFactory attribute) geoip_reader (spamtrap_backend.datamodels.NetworkEntityFactory attribute) get_distributor() (spamtraps.message_distributor.MessageDistributor static method) get_from_hostname() (spamtrap_backend.datamodels.NetworkEntityFactory class method) get_from_ip() (spamtrap_backend.datamodels.NetworkEntityFactory class method)

get_geo() (spamtrap_backend.datamodels.NetworkEntityFactory class method) get_hashstruct_from_bytes() (spamtrap_backend.datamodels.HashFactory class method) get_imap_args() (in module spamtraps.run_collector) get_ip() (spamtrap_backend.datamodels.NetworkEntityFactory class method) get_lmtp_args() (in module spamtraps.run_collector) get_message_ingestor() (spamtrap_backend.core.message_ingestor.MessageIngestor static method) get_rdns() (spamtrap_backend.datamodels.NetworkEntityFactory class method)

H

handle_DATA() (spamtraps.aiolmtp_collector.CustomLMTPHandler method) harvest() (spamtraps.aioimap_collector.CollectorManager method) Hash (class in spamtrap_backend.datamodels) hash (spamtrap_backend.datamodels.Email attribute) (spamtrap_backend.datamodels.Extraction attribute) (spamtrap_backend.datamodels.File attribute)

HashFactory (class in spamtrap_backend.datamodels) honeypot (spamtrap_backend.datamodels.EntityEnum attribute) (spamtrap_backend.datamodels.Session attribute) hostname (spamtrap_backend.datamodels.NetworkEntity attribute) HpFeedIngestor (class in spamtrap_backend.core.message_ingestor) HpfeedsDistributor (class in spamtraps.message_distributor)

I

identifier (spamtrap_backend.datamodels.FeedMsg attribute) INBOX (spamtraps.aioimap_collector.AsyncIMAPCollector attribute) inbox (spamtraps.aiolmtp_collector.CustomLMTPHandler attribute) ingest() (spamtrap_backend.core.message_ingestor.AMQPIngestor method) (spamtrap_backend.core.message_ingestor.HpFeedIngestor method) (spamtrap_backend.core.message_ingestor.MessageIngestor method) init_db() (spamtrap_backend.core.database.DatabaseHandler method) insert_dm() (spamtrap_backend.core.database.DatabaseHandler method) insert_file() (spamtrap_backend.core.database.DatabaseHandler method) insert_generic() (spamtrap_backend.core.database.DatabaseHandler method) insert_gridfs() (spamtrap_backend.core.database.DatabaseHandler method)

insert_network_entity() (spamtrap_backend.core.database.DatabaseHandler method) insert_url() (spamtrap_backend.core.database.DatabaseHandler method) ip (spamtrap_backend.datamodels.NetworkEntity attribute) ip_pattern (spamtrap_backend.datamodels.NetworkEntityFactory attribute) ipv4 (spamtrap_backend.datamodels.NetworkTypeEnum attribute) ipv6 (spamtrap_backend.datamodels.NetworkTypeEnum attribute) is_database_up() (spamtrap_backend.core.database.DatabaseHandler method) is_enriched (spamtrap_backend.datamodels.Email attribute) (spamtrap_backend.datamodels.File attribute) (spamtrap_backend.datamodels.NetworkEntity attribute) (spamtrap_backend.datamodels.Url attribute) is_public_ip() (spamtrap_backend.core.processor.mail_processor.MailProcessor static method)

K

kind (spamtrap_backend.datamodels.NetworkEvent attribute)

L

LMTPController (class in spamtraps.aiolmtp_collector)

location (spamtrap_backend.datamodels.Geo attribute) log_config() (in module spamtraps.run_collector)

M

MailProcessor (class in spamtrap_backend.core.processor.mail_processor) MAILSTATE (spamtraps.aioimap_collector.AsyncIMAPCollector attribute) mal_score (spamtrap_backend.datamodels.File attribute) malware_distribution_site (spamtrap_backend.datamodels.EntityEnum attribute) malware_infrastructure (spamtrap_backend.datamodels.EntityEnum attribute) MAX_RETRIES (spamtrap_backend.core.message_ingestor.MessageIngestor attribute) (spamtraps.message_distributor.MessageDistributor attribute) md5 (spamtrap_backend.datamodels.Hash attribute) mediate() (spamtrap_backend.core.mediator.Mediator method) Mediator (class in spamtrap_backend.core.mediator) message (spamtrap_backend.datamodels.Email attribute) message_id (spamtrap_backend.datamodels.Email attribute) MessageDistributor (class in spamtraps.message_distributor) MessageIngestor (class in spamtrap_backend.core.message_ingestor) module spamtrap_backend spamtrap_backend.core spamtrap_backend.core.database spamtrap_backend.core.mediator spamtrap_backend.core.message_ingestor spamtrap_backend.core.processor spamtrap_backend.core.processor.base_processor spamtrap_backend.core.processor.dionaea_processor spamtrap_backend.core.processor.mail_processor spamtrap_backend.core.processor.processor spamtrap_backend.datamodels spamtraps spamtraps.aioimap_collector spamtraps.aiolmtp_collector spamtraps.message_distributor spamtraps.run_collector

MSG_THRESHOLD (spamtrap_backend.core.processor.mail_processor.MailProcessor attribute)

N

name (spamtrap_backend.datamodels.Observer attribute) Network (class in spamtrap_backend.datamodels) network_entity (spamtrap_backend.datamodels.CollectionEnum attribute) NetworkEntity (class in spamtrap_backend.datamodels)

NetworkEntityFactory (class in spamtrap_backend.datamodels) NetworkEvent (class in spamtrap_backend.datamodels) NetworkTransportEnum (class in spamtrap_backend.datamodels) NetworkTypeEnum (class in spamtrap_backend.datamodels) normalize_ip() (spamtrap_backend.core.processor.dionaea_processor.DionaeaProcessor method)

O

Observer (class in spamtrap_backend.datamodels)

observer (spamtrap_backend.datamodels.Email attribute) (spamtrap_backend.datamodels.NetworkEvent attribute)

P

Parent (class in spamtrap_backend.datamodels) parent (spamtrap_backend.datamodels.File attribute) (spamtrap_backend.datamodels.NetworkEntity attribute) (spamtrap_backend.datamodels.Session attribute) (spamtrap_backend.datamodels.Url attribute) parent_id (spamtrap_backend.datamodels.Parent attribute) parent_type (spamtrap_backend.datamodels.Parent attribute) password (spamtrap_backend.datamodels.File attribute) payload (spamtrap_backend.datamodels.FeedMsg attribute) populate_decomposers() (spamtrap_backend.core.processor.processor.Processor method)

populate_distributors() (spamtraps.message_distributor.MessageDistributor static method) populate_ingestors() (spamtrap_backend.core.message_ingestor.MessageIngestor static method) port (spamtrap_backend.datamodels.NetworkEntity attribute) process() (spamtrap_backend.core.processor.base_processor.BaseProcessor method) (spamtrap_backend.core.processor.dionaea_processor.DionaeaProcessor method) (spamtrap_backend.core.processor.mail_processor.MailProcessor method) process_capture() (spamtrap_backend.core.processor.dionaea_processor.DionaeaProcessor method) process_connection() (spamtrap_backend.core.processor.dionaea_processor.DionaeaProcessor method) Processor (class in spamtrap_backend.core.processor.processor) protocol (spamtrap_backend.datamodels.Network attribute) (spamtrap_backend.datamodels.Session attribute)

Q

query_string (spamtrap_backend.datamodels.Url attribute)

R

raw (spamtrap_backend.datamodels.CollectionEnum attribute) RE_PASS_PATTERNS (spamtrap_backend.core.processor.mail_processor.MailProcessor attribute) RE_URL (spamtrap_backend.core.processor.mail_processor.MailProcessor attribute) read_account_config() (spamtraps.aioimap_collector.CollectorManager method) read_config() (in module spamtraps.run_collector) (spamtraps.aioimap_collector.CollectorManager static method) recipients (spamtrap_backend.datamodels.Email attribute) register_signals() (in module spamtraps.run_collector) related (spamtrap_backend.datamodels.Email attribute) (spamtrap_backend.datamodels.NetworkEvent attribute)

reply_to (spamtrap_backend.datamodels.Email attribute) resource_path (spamtrap_backend.datamodels.Url attribute) retrieve_datetime_in_utc() (spamtrap_backend.core.processor.mail_processor.MailProcessor static method) retrieve_file() (spamtrap_backend.core.database.DatabaseHandler method) retrieve_header_field() (spamtrap_backend.core.processor.mail_processor.MailProcessor static method) retrieve_mtas() (spamtrap_backend.core.processor.mail_processor.MailProcessor static method) RETRY_INTERVAL (spamtrap_backend.core.message_ingestor.MessageIngestor attribute) (spamtraps.message_distributor.MessageDistributor attribute) return_path (spamtrap_backend.datamodels.Email attribute) run_imap_collector() (in module spamtraps.run_collector) run_lmtp() (in module spamtraps.run_collector)

S

sanitize_address() (spamtrap_backend.core.processor.mail_processor.MailProcessor static method) scheme (spamtrap_backend.datamodels.Url attribute) search_pass() (spamtrap_backend.core.processor.mail_processor.MailProcessor class method) sender (spamtrap_backend.datamodels.Email attribute) Session (class in spamtrap_backend.datamodels) setup_logging() (in module spamtraps.run_collector) sha1 (spamtrap_backend.datamodels.Hash attribute) sha256 (spamtrap_backend.datamodels.Hash attribute) sha512 (spamtrap_backend.datamodels.Hash attribute) shutdown() (in module spamtraps.run_collector) size (spamtrap_backend.datamodels.Email attribute) smtp_server (spamtrap_backend.datamodels.EntityEnum attribute) source (spamtrap_backend.datamodels.Email attribute) (spamtrap_backend.datamodels.NetworkEvent attribute) source_country (spamtrap_backend.datamodels.Session attribute) source_ip (spamtrap_backend.datamodels.Session attribute) source_port (spamtrap_backend.datamodels.Session attribute) spamtrap_backend module spamtrap_backend.core module spamtrap_backend.core.database module spamtrap_backend.core.mediator module spamtrap_backend.core.message_ingestor module

spamtrap_backend.core.processor module spamtrap_backend.core.processor.base_processor module spamtrap_backend.core.processor.dionaea_processor module spamtrap_backend.core.processor.mail_processor module spamtrap_backend.core.processor.processor module spamtrap_backend.datamodels module spamtraps module spamtraps.aioimap_collector module spamtraps.aiolmtp_collector module spamtraps.message_distributor module spamtraps.run_collector module START_TIMEOUT (spamtraps.aioimap_collector.AsyncIMAPCollector attribute) store() (spamtraps.aiolmtp_collector.CustomLMTPHandler method) subdomain (spamtrap_backend.datamodels.Address attribute) (spamtrap_backend.datamodels.Url attribute) subject (spamtrap_backend.datamodels.Email attribute)

T

tcp (spamtrap_backend.datamodels.NetworkTransportEnum attribute) THRESHOLD (spamtrap_backend.core.processor.processor.Processor attribute) TIMEOUT (spamtrap_backend.core.processor.processor.Processor attribute) timestamp (spamtrap_backend.datamodels.Email attribute) (spamtrap_backend.datamodels.FeedMsg attribute) (spamtrap_backend.datamodels.File attribute) (spamtrap_backend.datamodels.NetworkEntity attribute) (spamtrap_backend.datamodels.NetworkEvent attribute) (spamtrap_backend.datamodels.Session attribute) (spamtrap_backend.datamodels.Url attribute)

tld (spamtrap_backend.datamodels.Url attribute) to (spamtrap_backend.datamodels.Email attribute) top_level_domain (spamtrap_backend.datamodels.Address attribute) transport (spamtrap_backend.datamodels.Network attribute) type (spamtrap_backend.datamodels.Network attribute) (spamtrap_backend.datamodels.NetworkEvent attribute) (spamtrap_backend.datamodels.Observer attribute)

U

udp (spamtrap_backend.datamodels.NetworkTransportEnum attribute) unspecified (spamtrap_backend.datamodels.EntityEnum attribute) Url (class in spamtrap_backend.datamodels)

url (spamtrap_backend.datamodels.CollectionEnum attribute) (spamtrap_backend.datamodels.Url attribute) urls (spamtrap_backend.datamodels.Email attribute) (spamtrap_backend.datamodels.NetworkEvent attribute)

V

victim (spamtrap_backend.datamodels.EntityEnum attribute)

W

wait_for_new_message() (spamtraps.aioimap_collector.AsyncIMAPCollector method)

website (spamtrap_backend.datamodels.EntityEnum attribute)