Library / sourced records

Resource library

Search by kind, technique, environment or critical readings. Each record states its source and review depth.

132published resources

Results

132 found
Case study2026

Cargo Theft Actor in a Persistent Decoy

Review: Public pageCritical reading

Proofpoint observed post-compromise activity for over a month in a Deception.Pro decoy environment; adversary behavior research, not a commercial effectiveness trial.

EndpointNetworkDecoyAdversary engagement
Dataset or lab2026

CTU-HONEY-LLM-2

Review: Public pageCritical reading

JSONL shell-conversation datasets for training and testing language-model SSH honeypots, according to Zenodo.

NetworkHoneypot
Open software2026

Cyber Deception Playground

Review: RepositoryEditor contribution

Open Docker Compose lab with vulnerable services, configurable deception levels, monitoring and an attacker environment for controlled training and research.

NetworkApplicationHoneypotDecoy
Dataset or lab2026

DICOMHawk Medical Imaging Deception Dataset

Review: Public pageCritical reading

Zenodo record of DICOM/PACS telemetry from medical-imaging honeypot research; it documents periods of data loss.

ApplicationOT/ICSHoneypot
Dataset or lab2026

Four-Month SSH Botnet Interaction Dataset

Review: Public page

SSH interaction data collected by a honeypot between July and November 2025; event count comes from the authors.

NetworkHoneypot
Community or education2026

NeroSwarm Research Access Program

Review: Public page

September 2026 program offering time-limited deception-platform access for non-commercial research; eligibility is listed at the source.

NetworkHoneypotHoneytoken
Case study2026

Trapping a Mustang Panda

Review: Public pageCritical reading

IBM X-Force and Deception.Pro recorded two incidents in simulated organizations, observing reconnaissance, malware deployment and fake-document exfiltration.

EndpointOT/ICSDecoyAdversary engagement
Open software2025

BUDA

Review: RepositoryEditor contribution

Experimental framework generating fictitious user profiles and activity for decoy environments; the repository documents narratives, profiles and language-model integration.

EndpointNetworkDecoyAdversary engagement
Open software2025

dns-honeypot

Review: Repository

Repository about DNS simulation; documentation and maintenance require further review.

NetworkHoneypot
Dataset or lab2025

Honeypot-Anomaly-Self Attack

Review: Public pageCritical reading

CSV of seven days of Suricata events from T-Pot, according to the Zenodo record.

NetworkHoneypot
Open software2025

Krawl

Review: Repository

Repository about fake applications for attacker diversion; documentation and maintenance require further review.

ApplicationDecoy
Dataset or lab2025

Multi-Regional Cloud Honeynet Dataset

Review: Public pageCritical reading

Data from a T-Pot honeynet spread across Azure regions, according to its Zenodo record.

CloudHoneypot
Case study2025

NCSC Cyber Deception Trials

Review: Public pageCritical reading

Institutional report on deception trials involving UK organizations and providers.

NetworkCloudHoneypotDecoy
Dataset or lab2025

Salty Seagull Dataset

Review: Public pageCritical reading

Record of access and attack data against a VSAT honeynet.

OT/ICSHoneypot
Open software2024

cloud-active-defense

Review: Repository

Repository about cloud-application decoys; documentation and maintenance require further review.

CloudDecoy
Dataset or lab2024

CTU Hornet 65 Niner

Review: Public pageCritical reading

Zeek traffic record from geographically distributed low-interaction sensors; the page says no conventional honeypot software was used.

NetworkHoneypot

Each record shows the source reviewed. Vendor claims and independent results are labeled separately.