Which internal threat hunting technique deploys decoy systems or credentials to detect attacker lateral movement within the environment?

Question

Accepted Answer

B. Honeypots. Honeypots are decoy systems or resources deployed inside the environment to attract and detect attacker activity such as lateral movement, reconnaissance, or credential harvesting. Any interaction with a honeypot is a high-confidence indicator of compromise. The CAS-005 V5 objectives list honeypots under internal intelligence in threat hunting within Security Operations.

Which internal threat hunting technique deploys decoy systems or credentials to detect attacker lateral movement within the environment?

Related Questions

Discussion