Distributed HoneyNets and Understanding Attack…

This blog post by Dave Kennedy outlines BDS Vision 2.2 defensive features for creating a HoneyNet—including HoneyLLMNR/NBNS, HoneyTokens, HoneyFiles, and HoneyPorts—to detect attackers early in an intrusion. It explains how these simulated artifacts and randomized endpoints increase the likelihood of spotting lateral movement and credential theft, references related tools (Artillery, PowerShell scripts) and situates the approach within common attacker behaviors.