Product—
Material reviewed: Public pageCritical readingPersistent instrumented environments for malware detonation and adversary observation, according to the platform description.
NetworkEndpointDecoyAdversary engagement
Open software—
Material reviewed: Repository metadataCritical readingHoneypot project for observing attacks against network services.
NetworkHoneypot
Case study—
Material reviewed: Public pageCritical readingEnergy company Shadow adoption story published by Proofpoint; investigation-time reduction is a customer statement reported by the vendor.
EndpointIdentityDecoy
Product—
Material reviewed: Public pageCritical readingCommercial decoy and breadcrumb platform for network, identity and cloud, according to Fidelis.
NetworkIdentityDecoyHoneytoken
Product—
Material reviewed: Public pageCritical readingFortinet platform for deploying decoy assets and alerting on their use.
NetworkOT/ICSDecoyHoneypot
Open software—
Material reviewed: Repository metadataCritical readingWeb honeypot using a language model to generate interactions.
ApplicationHoneypot
Open software—
Material reviewed: Repository metadataCritical readingWeb application honeypot recording interactions with simulated attack surfaces.
ApplicationHoneypot
Case study—
Material reviewed: Public pageCritical readingCounterCraft describes a bank API digital twin that attracted an attack within 30 days; outcome attributed to the vendor.
ApplicationCloudDecoy
Service—
Material reviewed: Public pageCritical readingSaaS honeypot and deception-signal offering published by Sprint IT Solutions; operational terms await assessment.
NetworkHoneypot
Open software—
Material reviewed: Repository metadataCritical readingOpen framework for building and operating honeypot sensors.
NetworkHoneypot
Product—
Material reviewed: Public pageCritical readingInsightIDR capabilities for honeypots, honey users, files and credentials; documentation describes interaction alerts.
NetworkIdentityHoneypotHoneytoken
Service—
Material reviewed: Public pageCritical readingAcalvio datasheet describing cloud-hosted and managed external decoys with STIX intelligence sharing.
CloudDecoy
Product—
Material reviewed: Public pageCritical readingDocumented feature tagging honeytoken accounts and devices; sign-ins generate Defender for Identity alerts.
IdentityHoneytoken
Framework or guide—
Material reviewed: Public pageCritical readingKnowledge base of defensive techniques with terminology related to decoys.
NetworkDecoy
Framework or guide—
Material reviewed: Public pageCritical readingFramework for planning and communicating denial, deception and adversary engagement.
NetworkCloudAdversary engagement
Open software—
Material reviewed: Repository metadataCritical readingMulti-protocol network honeypot for detecting suspicious interactions inside networks.
NetworkHoneypot
Product—
Material reviewed: Public pageCritical readingCommercial identity protection component deploying endpoint deceptions to alert on lateral movement, according to Proofpoint.
EndpointIdentityDecoyHoneytoken
Case study—
Material reviewed: Public pageCritical readingCloud deception adoption story published by the vendor Tracebit.
CloudHoneytoken
Product—
Material reviewed: Public pageCritical readingCommercial deception portfolio for identity, cloud and networks, according to Acalvio documentation.
IdentityCloudDecoyHoneytoken
Product—
Material reviewed: Public pageCritical readingDecoy-based targeted threat intelligence offering; Acalvio describes managed and appliance delivery.
CloudNetworkDecoyHoneytoken
Open software—
Material reviewed: Repository metadataCritical readingReactive web honeypot component developed by the mushorg team.
ApplicationHoneypot
Open software—
Material reviewed: Repository metadataCritical readingPlatform combining multiple honeypots and analysis tools in one deployment.
NetworkIoTHoneypot
Product—
Material reviewed: Public pageCritical readingCommercial platform using decoys for detection and threat intelligence, according to CounterCraft.
NetworkCloudDecoyAdversary engagement
Product—
Material reviewed: Public pageCritical readingCommercial decoy product for detecting interactions with systems that appear legitimate.
NetworkIdentityHoneypotHoneytoken