Capture - Client Honeypot

Capture is a high interaction client honeypot. A client honeypot is a security technology that allows to search and identify malicious servers on a network. Capture identifies malicious servers by interacting with potentially malicious servers using a dedicated virtual machine and observing its system state changes. If an system state change is detected, since no other activity occurs on the dedicated client machine, the server Capture interacted with is classified as malicious.