Detect lateral movement
Why it matters
Honeypots are an effective and low noise solution for detecting lateral movement and attackers who may have gained entry to the network. Currently, they are underutilized in the internal networks due to:
- Largely manual processes needed to deploy and maintain the network of honeypots
- Concerns over the proper isolation of honeypots from the rest of the network
- Lack of easy results retrieval from a large network of honeypots
How can we help
- SensorFleet provides an easy and automated platform for the honeypot deployment and management
- Sensor platform implements containerisation and isolation for the honeypot
- Results from the honeypot network are retrieved automatically and can be directed to SIEM or other analytic solutions
Bigger picture
SensorFleet enables secure deployment of a comprehensive network of honeypots and takes care of the tedious parts. Once the honeypots are in place, additional controls are easy to deploy on the same Sensors as requirements evolve.
Firewalls can block out malicious traffic from the outside but will do nothing to help with detecting or removing malware that has already found itself “inside” the protected network.