What is a Honeypot?
A Honeypot is a decoy system or resource designed to attract attackers and detect malicious activity. It mimics legitimate systems but is isolated and monitored to capture attacker behavior.
Honeypots are often used in research and Threat Hunting activities.
What is a Honeypot used for?
Honeypots are used to gather intelligence on attacker techniques, identify Indicators of Attack (IOA), and improve detection capabilities.
Organizations use honeypots to enhance Cyber Threat Intelligence (CTI), test defenses, and support Security Operations Center (SOC) monitoring.
