Thinkst Canary: OpenSOC CTF Tool Demo
Shows how deception technology and Thinkst Canary tokens generate high-fidelity alerts during unauthorized network traversal.
Summary
Deception Technology in Modern Networks
Thinkst Canary deployable honeypots and canary tokens act as deceptive tripwires across internal networks, alerting defenders the moment an attacker begins lateral reconnaissance.
Deploying Decoys within OpenSOC
The presentation explores how decoy servers, fake credentials, and breadcrumbs are integrated into the OpenSOC CTF environment to trap adversaries exploring internal network segments.
High-Fidelity Triage and Attribution
Canary alerts provide near-zero false-positive signals, enabling incident response teams to rapidly pinpoint the origin of unauthorized credential usage and host enumeration.
Related talks
Packet Hacking Village·43 min
Adel Karimi
Lightweight reverse proxy and AI agent system using TLS and HTTP fingerprints to block bots and drive dynamic deception.
Main Stage·48 min
Rob Bathurst · Jeff Thomas
Rob Bathurst and Jeff Thomas explore deploying honeytokens and canary files to detect unauthorized lateral movement and insider threat access early.
OWASP Foundation·46 min
Engineers explore architecture and security mechanisms for APPSEC Cali 2018 - Applied Deception Beyond the Honeypot: Moving Past 101.