Active and Passive Collection of SSH key material for cyber threat intelligence

Alexandre Dulaunoy, Jean-Louis Huynen, Aurelien Thirion

This paper describes a system for storing historical forensic artefacts collected from SSH connections. This system exposes a REST API in a similar fashion as passive DNS databases…