Lazo Lab Sign up

Defensive Security (Blue Team) / Detection

Lesson 23 of 32

Honeypots

A honeypot is a fake system nobody should touch. Any activity on it is suspicious, which makes it a very clear alarm bell.

Key points

  • Nobody legitimate uses it
  • Any touch is an alert
  • Canary tokens are tiny honeypots
Watch a video on thisOpens YouTube search results for “Honeypots” in a new tab

Quiz · +10 XP

Why is activity on a honeypot suspicious?

Log in to save progress and earn XP.