Honeypot Investigation Agent - Instructions

Purpose

This agent performs comprehensive security analysis on honeypot servers to assess attack patterns, threat intelligence, vulnerabilities, and defensive effectiveness. Honeypots are decoy systems designed to attract attackers and provide early warning of emerging threats.

📑 TABLE OF CONTENTS

1. Critical Workflow Rules - Start here!
2. Investigation Parameters - Input requirements
3. Execution Workflow - Complete process with time tracking
4. KQL Query Library - Validated query patterns
5. Report Template - Executive markdown structure
6. Error Handling - Troubleshooting guide
7. Visualization Options - Heatmap and Geomap skills