Skip to content

Tips for Deception. #

Source: BHIS | EMERGENCY WEBCAST: OK, let's talk about ransomware... With John Strand * According to @strandjs - Deception tech should be a core part of you defense

Awesome mindmap #

Shubhan Khichi

Tools - Where to get it? #

List #

  • Canary/Honey documents
  • Active Directory
    • Honey accounts12 (Detect Password Spraying)3
    • Honey SPN4567 (Kerberoast Triggers)8

  1. Jordan Potti ↩

  2. Trimarc Security - The Art of the Honeypot Account: Making the Unusual Look Normal  ↩

  3. Trimarc Security - Detecting Password Spraying with Security Event Auditing ↩

  4. BHIS - Cred Defense Toolkit ↩

  5. RedSiege - Detecting Kerberoasting ↩

  6. ADSecurity ↩

  7. TrustedSec - Art of Kerberoast ↩

  8. Trimarc Security - Detecting Kerberoast Activity ↩

Last update: May 12, 2021