The Shadowserver Foundation

Special projects: (1) law enforcement special projects team - a team of Shadowserver dashboard. People and efforts to support law enforcement and their efforts to pursue and take down cyber-criminal activities and infrastructures. (2) registrar of last resort, a special purpose dns registrar for registering and managing malicious domain names used for malware/botnet command and control, particularly high-volume domain generation algorithms (dgas). (3) The Shadowserver alliance. (4) other projects.

Core data collection projects: (1) sinkholing, a project to redirect malicious traffic by taking over malicious domains in order to seize or disrupt botnets and warn victims of cybercrime; (2) scanning, a project to scan ipv4 and hitlist based scan ipv6 space for The purpose of identifying misconfigured, vulnerable, compromised or otherwise abusable services; (3) honeypot/honeynet, a project to develop and maintain a worldwide set of emulated vulnerable systems to capture and analyze malicious internet traffic; (4) malware repository, a project to collect malware at scale and analyze The malware, which also includes The execution of The malware in sandboxes.

Backend management system: projects for management, upgrades, and expansion of The Shadowserver data center and related equipment to include development of supporting technologies for new and existing missions and maintenance of existing data storage and query systems, and creation of daily reports (threat intelligence feeds) to The internet defender community. Includes maintenance of The public Shadowserver dashboard.