~Cisa~
Cyber decoys create high-fidelity alerts to detect post-compromise activity and LOTL techniques.
-
IOCs: (None identified)
-
#MITREATT&CK #ThreatIntel #ZeroTrust

@sophossecurity.bsky.social
ATT&CK now separates Stealth (TA0005) from Defense Impairment (TA0112), changing detection and forensic priorities.
-
IOCs: (None identified)
-
#DFIR #MITREATT&CK #ThreatIntel