In "Attack Detection and Forensics Using Honeypot in IoT Environment," Cowrie was called a "medium interaction honeypot," and results from using it for 40 days to capture "all communicated sessions in log files" were described.