D3-DO Decoy Object

A Decoy Object is created and deployed for the purposes of deceiving attackers.

Technique Overview Decoy objects are typically configured with detectable means of communication but do not have any legitimate business purpose. Any communication via or to these objects should be logged and analyzed to find potential indicators of compromise for a possible past or future attack against other systems.