Definition

A Decoy Object is created and deployed for the purposes of deceiving attackers.

Technique Overview

Decoy objects are typically configured with detectable means of communication but do not have any legitimate business purpose. Any communication via or to these objects should be logged and analyzed to find potential indicators of compromise for a possible past or future attack against other systems.

Artifact Relationships

This defensive technique relates to specific digital artifacts.