Zloool

Production honeypot data-pull, investigation, and report workflow — SSH data pull from droplet, log/DB parsing with analyze_production.py, attack pattern detection, data quality audit, and structured report generation.

Fast read-only SSH health check for the manyfaced honeypot service — is it alive, are processes running, ports listening, disk healthy? No data pulls, no reports, nothing written to disk.

Recipe for adding a new fake service "face" to the honeypot — handler class, route registration, monster page entry, and tests. Based on current Router + per-service route files architecture (not the stale registry.py pattern).