Building Atlas Cargo's deception program around the deception loop, a figure-eight of eight arcs: objectives, design, placement and believability on the build side, then alerting, engagement, legal and safety guardrails and measurement on the engage side. Honeytoken credentials in Active Directory, a decoy file and a decoy file server sit on the path an intruder once used for eleven undetected days, audited so nothing looks too perfect; now a decoy touch fires a top-priority alert the same night, techniques are captured safely inside Atlas Cargo's own estate only, and coverage is measured as evidence for the next phase.

CY-SENIOR-082Senior Level · Cyber Deception Program

Cyber Deception & Threat Engagement Program — The Deception Loop

A senior-level program-build course that catches intruders early, with high fidelity, inside your own environment. Work the deception loop across eight arcs - Objectives & Threat Model, Deception Design, Placement Strategy, Believability & Hygiene, Alerting & Triage, Engagement & Intelligence, Legal & Safety Guardrails, and Measure & Evolve - building honeytokens, decoys, and canaries, placing and hardening them, wiring near-zero false-positive alerting, safely capturing intelligence, holding legal guardrails, and proving the program's value in evidence. Four hands-on activities in every lesson.

15 hours8 chapters32 lessons225 activities8 labs

What you'll learn

Set deception objectives grounded in a real threat model, ATT&CK techniques, and crown jewels.
Design honeytokens, decoys, and canaries layered across identity, cloud, and OT, and place them where attackers actually look without colliding with real users.
Keep deception believable and hygienic, and wire near-zero false-positive alerting with runbooks and SIEM/SOAR/EDR integration.
Engage safely, capture intelligence, hold legal and safety guardrails, and measure and grow the program strictly inside your own environment.

Price:৳10,000