πŸ“„2. Guardpot Platform Administration

2.5 G-Token Module

5 min read99 viewsUpdated May 20, 2026

The G-Token module manages secure tokens for API access, agent authentication, and deployment across the Guardpot ecosystem, as shown in Figure 2.5-1.

Figure 2.5-1 – G-Token Management Interface

Figure 2.5-1 – G-Token Management Interface


2.5.1 View Modes

The top-right corner of the module provides three view mode options for token management and deployment, as shown in Figure 2.5.1-1.

Figure 2.5.1-1 – G-Token View Mode Selector

View

Description

Graph

Visual mapping of tokens to associated Guardpots and services

List

Token creation interface with available token types and created tokens

Deployment

Mass deployment of G-Tokens to multiple computers via Active Directory


2.5.2 Graph View

The Graph view provides a visual representation of token relationships across the Guardpot ecosystem, as shown in Figure 2.5.2-1.

Figure 2.5.2-1 – G-Token Graph View

2.5.2.1 Search and Token Selection

The left panel includes a Search tokens... field for locating specific tokens by name. Below the search bar, the token list displays all available tokens for selection.

2.5.2.2 Token Visualization

When no token is selected, the main panel displays the following prompt:

Select a Token Click on a token from the left to view its visualization.

Once a token is selected, the graph view renders a visual node-edge map showing the token's relationships with associated Guardpots, services, and deployment targets.


2.5.3 List View

The List view serves as the primary token creation and management interface, as shown in Figure 2.5.3-1.

Figure 2.5.3-1 – G-Token List View

2.5.3.1 Search Tokens

A Search tokens field at the top of the List view allows you to filter through created tokens by name, making it easy to locate specific tokens in large deployments.

2.5.3.2 Available Token Types

The Create a Token section displays the following token types that can be generated:

Token Type

Icon

Description

Web bug

Tracking pixel for web-based interaction monitoring

QR code

QR code token for physical or digital distribution

Microsoft Excel

Malicious Excel document token

Microsoft Word

Malicious Word document token

Custom EXE / binary

Custom executable binary token

CSS File

Cascading Stylesheet token for web tracking

JavaScript File

JavaScript token for web-based interaction

Kubernetes Profile

Kubernetes configuration profile token

OpenVPN Config

OpenVPN configuration file token

WireGuard Config

WireGuard configuration file token

AD User

Active Directory user account token

AD Group

Active Directory group token

RDP Profile

Remote Desktop Protocol profile token

SSH Profile

Secure Shell profile token

FTP Credential

FTP access credential token

Web Cookie

Browser cookie token for session tracking

2.5.3.3 Created Tokens Section

Below the token type selection grid, the Created Tokens section displays all previously generated tokens. The header shows the total count:

Created Tokens (0)

When no tokens have been created, the following empty state message is displayed:

No tokens created yet. Click on a token type above to create one.

Clicking any token type initiates the token creation workflow, where you configure the token's properties and generate the token value.

2.5.3.4 Token Properties

Each created token includes the following properties:

Property

Description

Token Name

Identifier for the token

Token Value

The token string (masked for security)

Created Date

When the token was generated

Expiry Date

When the token expires

Associated Guardpot

Which honeypot the token is linked to

Permissions

Access level: Read, Write, or Admin

2.5.3.5 Token Actions

Action

Description

Regenerate

Generate a new token value while maintaining the same configuration

Revoke

Immediately invalidate the token, preventing further use

Delete

Permanently remove the token from the system


2.5.4 Deployment View

The Deployment view enables mass distribution of G-Tokens to multiple computers through Active Directory integration, as shown in Figure 2.5.4-1.

Figure 2.5.4-1 – G-Token Deployment View

2.5.4.1 Deployment Header

The Deployment view header displays the following description:

G-Token Deployments Deploy G-Tokens to multiple computers via Active Directory

2.5.4.2 Empty State

When no deployments have been configured, the following message is displayed:

No deployments yet Create your first deployment to get started

2.5.4.3 Deployment Toolbar Buttons

The top-right corner of the Deployment view provides two management buttons:

Button

Function

LDAP Credentials

Manage LDAP connection configurations for deployment targeting

Create New Deployment

Launch the deployment configuration wizard


2.5.4.4 LDAP Credentials Management

Clicking the LDAP Credentials button opens the LDAP connection management interface, as shown in Figure 2.5.4.4-1.

Figure 2.5.4.4-1 – LDAP Credentials Management

The header displays current configuration status:

LDAP Credentials Management Manage LDAP connections for deployment targeting

The saved credentials counter shows:

0 saved0 credentials configured

When no credentials are configured, the following empty state is shown:

No LDAP credentials configured yet. Click Add LDAP Credential to get started.

Adding a New LDAP Credential

Click the Add LDAP Credential button to open the configuration form, as shown in Figure 2.5.4.4-2.

Figure 2.5.4.4-2 – New LDAP Credential Form

The form is titled "New LDAP Credential" with the subtitle "Configure a new LDAP connection" and includes the following sections:

Basic Info:

Parameter

Description

Display Name *

A descriptive name for this LDAP connection (required)

Connection:

Parameter

Description

LDAP Server *

Hostname or IP address of the LDAP server (required)

Port

LDAP service port (default: 389 for plaintext, 636 for SSL)

SSL / TLS Encryption

Encryption method selection. Options include SSL/TLS or Plaintext β€” not recommended

Authentication:

Parameter

Description

Username / Bind DN *

Distinguished Name for LDAP binding (required)

Bind Password *

Password for the bind user (required)

Directory:

Parameter

Description

Base DN *

Base Distinguished Name for directory searches (required)

Search Filter

Optional LDAP filter to restrict search results


2.5.4.5 Creating a New Deployment

Clicking the Create New Deployment button opens the deployment configuration wizard, as shown in Figure 2.5.4.5-1.

Figure 2.5.4.5-1 – Create New Deployment Form

The form is titled "Create New Deployment" with the subtitle "Configure and launch a GToken deployment to LDAP targets" and includes the following sections:

Configuration:

Parameter

Description

Deployment Name *

A descriptive name for this deployment (required)

LDAP Credentials *

Select a previously configured LDAP connection (required)

Target Selection β€” Search OUs and Groups:

Parameter

Description

Selected OUs

Organizational Units targeted for deployment. Displays count (e.g., "0 OUs selected") with a "No OUs selected" placeholder when empty

Selected Groups

Active Directory groups targeted for deployment. Displays count (e.g., "0 Groups selected") with a "No groups selected" placeholder when empty

File & Path:

Parameter

Description

Target Path *

Destination path on target machines (e.g., C:\Users\Public\Documents\) (required)

File Source *

Choose between Upload New File to provide a new payload or Use Existing G-Token to deploy a previously created token (required)

Was this article helpful?

Your feedback helps us improve our documentation.

Send feedback