In this episode, we break down how deploying cyber deception and honeypots can give defenders the upper hand against threat actors. Learn actionable strategies from active internal pen testers on guaranteeing early detection and improving your blue team’s effectiveness.
- The psychological impact of deception on attackers and how it changes their behavior
- Why deception is a free or low-cost layer that outperforms standard EDR in detecting reconnaissance
- Practical methods to create enticing bait in your environment—folders, files, shares, and more
- Common misconfiguration tricks and pitfalls to avoid, ensuring believable decoys
- Key resources and commercial tools for quickly implementing deception in your network
Resources
- Spencer’s Cyber Deception Webinar
- Spencer’s X posts on the topic of cyber deception
- https://thinkst.com/, https://canary.tools/
- @_subtee on X, @haroonmeer on X
- https://tracebit.com/
Blog:Â https://offsec.blog/
Youtube:Â https://www.youtube.com/@cyberthreatpov
Twitter:Â https://x.com/cyberthreatpov
Follow Spencer on social ⬇
Spencer’s Links:Â https://spenceralessi.com
Work with Us: https://securit360.com | Find vulnerabilities that matter, learn about how we do internal pentesting here.