domains / families / security / performing-deception-technology-deployment

performing-deception-technology-deployment

separate

'Deploys deception technology including honeypots, honeytokens, and decoy

When to use

• SOC teams need high-fidelity detection of post-compromise lateral movement with near-zero false positives
• Existing detection tools miss advanced attackers who avoid triggering threshold-based alerts
• The organization wants to detect credential abuse by planting fake credentials as honeytokens
• Network segmentation gaps need compensating detection controls

When not to use

• replacement for fundamental security controls
• patching
• EDR
• network segmentation

Skill page

Source