Adopt decoys and Honeypots in your environment

The US Cybersecurity and Infrastructure Security Agency (CISA) has just published guidance recommending organisations to adopt decoys as part of a Zero Trust to security (finally!). We as in pentesters and information security professionals alike have been recommending this for quite some time, its a cheap and efficient way to get advanced warning when a breach has happened and exposes the adversary in your environment. You can use Canarytokens which is awesome to easily generate all sorts of files and tokens that can be stored within your environment.

The CISA advisory can be found here:

Using Cyber Decoys to Strengthen Detection and Response

#danweis #cisa #honeypots #canarytokens #threatdetection #decoys #adversarydetection #cybersecurity #boardroomcyber