Nowadays, the use of honeypots are helping to improve systems
security, providing information about the techniques used by the
attackers, from the attackers themselves.  Based on this new resource
for information systems security, this paper shows the techniques for
activity monitoring in high-interaction honeypots.  Tools based on
these techniques in user and kernel space are also presented.