Knossos: Procedurally Generated Decoy Environments

This document describes Knossos, a procedural engine that profiles a customer's cloud environment and generates fully populated, realistic decoy AWS accounts (VPCs, EC2, RDS, Lambda, IAM, Secrets Manager, etc.) to record and analyze attacker interactions. The focus is on design and capabilities of a defensive deception system rather than reporting an actual compromise or threat.