Defensive technique
Planned operations to observe adversary decisions and learn from them while maintaining defensive control.
Research question
Definitions and technical considerations should be checked against the primary source. Atlas records are a selection tagged with this topic; a matching tag does not demonstrate operational outcomes.
Cross-reference
These counts describe tagged Atlas records, not the worldwide number of studies or offerings.
Linked library
Proofpoint observed post-compromise activity for over a month in a Deception.Pro decoy environment; adversary behavior research, not a commercial effectiveness trial.
Pacheco and Staino present BUDA as an approach to simulating fictitious-user activity and strengthening decoy credibility, aligned with MITRE Engage.
IBM X-Force and Deception.Pro recorded two incidents in simulated organizations, observing reconnaissance, malware deployment and fake-document exfiltration.
Experimental framework generating fictitious user profiles and activity for decoy environments; the repository documents narratives, profiles and language-model integration.
Survey proposing a taxonomy and comparing cyber deception research lines, including AI-based work.
Open framework for planning deception operations and deploying decoys and services with Python and Docker, according to its repository and documentation.