hard20 pts · first answer countsdetection-engineeringdeception

Why honeytokens are high fidelity

You place a fake AWS access key in an internal wiki and a fake admin account in Active Directory. Why are alerts on their use so valuable?

A.No legitimate process should ever use them, so any use is almost certainly malicious and false positives are very rareB.They block attackers automaticallyC.They replace the need for EDRD.They make real credentials impossible to steal

Discussion 0

Join free to post in the discussion.

Why honeytokens are high fidelity

Discussion 0

Related questions