zyw-286/shell-attack-evolution-dataset

Shell Honeypot Attack Request–Response Dataset A standardized, MITRE ATT&CK–annotated dataset of post-login shell attacks captured by Cowrie SSH/Telnet honeypots across two collection periods — 2021–2022 and 2024. It pairs attacker shell commands with real captured system responses, enabling both longitudinal threat analysis and the training/evaluation of AI-driven honeypots. This is the open-source release accompanying the paper “Unveiling Evolving Threats: A Data Analysis… See the full description on the dataset page: https://huggingface.co/datasets/zyw-286/shell-attack-evolution-dataset.