Evidence & citations

Every source backing the technique registry, which techniques each one supports, and which ATT&CK mappings it is evidence for. 90 sources — 32 peer-reviewed. 225 mappings carry per-mapping evidence so far.

ATT&CK technique definitions shown in the matrix are MITRE's own: the first paragraph of each technique description in ATT&CK v20.0, with citation markers removed. © 2026 The MITRE Corporation. This work is reproduced and distributed with the permission of The MITRE Corporation.

Standards & taxonomies 13

Decoy User Credential (D3-DUC)
MITRE D3FEND
standard
supports D001D002D003D004D005D006D007D008D009D010D043D049
Source opened and checked 2026-10-16
Decoy Session Token (D3-DST)
MITRE D3FEND
standard
supports D010D044
Source opened and checked 2026-10-16
Decoy File (D3-DF)
MITRE D3FEND
standard
supports D015D016D017D018
Source opened and checked 2026-10-16
Decoy Object (D3-DO)
MITRE D3FEND
standard
supports D014D019D020D021D028D030D031D032D033D034D035D036D037D038D039D040D042D045
Source opened and checked 2026-10-16
Decoy Network Resource (D3-DNR)
MITRE D3FEND
standard
supports D011D022D023D024D025D026D027D029D052
Source opened and checked 2026-10-16
Decoy Environment (D3-DE)
MITRE D3FEND
standard
supports D011D012D013D019D041D048
Source opened and checked 2026-10-16
Decoy Persona (D3-DP)
MITRE D3FEND
standard
supports D055
Source opened and checked 2026-10-16
Decoy Public Release (D3-DPR)
MITRE D3FEND
standard
supports D038
Source opened and checked 2026-10-16
OWASP Top 10 for LLM Applications 2025
OWASP · 2025
standard
supports D050D051D071D072D073
Source opened and checked 2026-10-16
ATLAS: Adversarial Threat Landscape for AI Systems
MITRE
standard
supports D050D051D071D072D073
Source opened and checked 2026-10-16
MITRE Engage — adversary engagement matrix and ATT&CK mapping
MITRE · 2022
standard
supports D001D003D006D010D064D002D005D038D011D016D042D018D020D021D082D022D023D024D025D061D062D063D074D015D070D043D057D056D027D067D013D019D030D033D012D008D017D076D046D055D041D040D026D007D028D069D009D031D060D059D045D075D044D058D078D079D080D037D034D047D054D052D035D029D039D071D051
evidence for T1078T1133T1190T1199T1098T1068T1535T1578T1040T1110T1528T1552T1046T1526T1538T1580T1613T1072T1080T1550T1119T1213T1530T1048T1537T1567T1485T1531T1047T1557T1033T1592T1003T1539T1069T1114T1594T1025T1007T1135T1053T1005T1558T1555T1029T1011T1589T1560T1021T1491T1563T1595T1087T1083T1074T1049T1102T1057T1041T1591T1212T1590T1210T1039T1203T1012T1030T1221T1018T1518T1220T1529
Source opened and checked 2026-10-16
MITRE ATT&CK Enterprise v20.0
MITRE · 2026
standard
supports D011D016D042D030D012D013D006D067D001D003D022D027D014D065D041D040D005D031D032D028D038D026D007D010D069D008D009D015D019D035D060D076D059D070D018D058D043D045D046D052D074D075D044D017D086D084D083D085D087D033D089D088D078D079D080D004D037D034D024D047D055D020D054D051D077D064D068D073D081D066D021D036D002D057D082D050D048D049D023D025D056D071
evidence for T1078.001T1078.004T1133T1190T1195T1195.002T1199T1566.004T1059.004T1059.006T1204.003T1610T1648T1098.001T1098.003T1098.004T1098.005T1098.006T1136T1136.003T1525T1543.005T1546T1556T1556.006T1556.007T1671T1053.007T1068T1484T1484.002T1548.005T1535T1578T1578.001T1612T1040T1110.003T1528T1552.001T1552.005T1552.007T1555.006T1606.002T1621T1649T1069.003T1087.004T1538T1654T1021.007T1021.008T1072T1534T1550T1074.002T1213.003T1213.006T1020.001T1048T1537T1567T1567.004T1485T1489T1490T1491.002T1496T1496.001T1499T1531T1657T1053.005T1047T1037T1557T1033T1592T1602T1539T1568.002T1114T1003.002T1594T1071.004T1615T1025T1547T1003.004T1087.002T1592.001T1053.003T1069.002T1566.002T1566.001T1115T1675T1007T1552.002T1685.002T1082T1071T1053T1555T1055T1218T1029T1572T1011T1589T1560T1595.002T1555.003T1491T1563T1217T1552.004T1557.001T1222T1003.001T1673T1090T1677T1482T1070T1568T1074T1049T1055.002T1497T1102T1104T1552.006T1048.002T1057T1546.003T1041T1591T1212T1590T1210T1593T1597T1566T1090.003T1565T1574T1055.012T1201T1592.002T1056T1685T1203T1567.002T1570T1095T1030T1550.004T1598T1569T1651T1595.001T1221T1134T1071.001T1518T1220T1003.003T1686.001T1602.001T1550.001T1008T1558.003T1055.001T1216T1048.003T1529T1696T1698T1699T1700
Source opened and checked 2026-10-16
Bot Management and Anti-Automation Cheat Sheet
OWASP
standard
supports D089
evidence for T1696
Source opened and checked 2026-10-16

Peer-reviewed research 32

Honeywords: Making Password-Cracking Detectable
Juels, A.; Rivest, R. · ACM CCS · 2013
peer-reviewed
supports D003
Source opened and checked 2026-10-16
Bernoulli Honeywords
Wang, K. C.; Reiter, M. K. · NDSS · 2024
peer-reviewed
supports D003
Source opened and checked 2026-10-16
A Virtual Honeypot Framework
Provos, N. · USENIX Security Symposium · 2004
peer-reviewed
supports D011D023
evidence for T1046T1595.002T1595T1595.001T1018
Source opened and checked 2026-10-16
Using Honeybuckets to Characterize Cloud Storage Scanning in the Wild
Izhikevich, K.; Voelker, G.; Savage, S.; Izhikevich, L. · IEEE EuroS&P · 2024
peer-reviewed
supports D015D018
evidence for T1619T1119T1530
Source opened and checked 2026-10-16
An Innovative Security Strategy using Reactive Web Application Honeypot
Gupta, R.; Viswanatham V., M.; Manikandan, K. · arXiv · 2021
peer-reviewed
supports D079
evidence for T1190T1595.002
Source opened and checked 2026-10-16
Three Decades of Deception Techniques in Active Cyber Defense — Retrospect and Outlook
Zhang, L.; Thing, V. L. L. · arXiv:2104.03594 · 2021
peer-reviewed
supports D046D054
Source opened and checked 2026-10-16
Agentic Cloud Decoys: A Deception-Driven Framework for Autonomous Intrusion Investigation
Manivannan, M.; Alharthi, D. · arXiv:2607.24006 · 2026
peer-reviewed
supports D011D041D015
Source opened and checked 2026-10-16
Application Layer Cyber Deception without Developer Interaction
Kahlhofer, M.; Rass, S. · ADnD 2024 (arXiv:2405.12852) · 2024
peer-reviewed
supports D027D074
Source opened and checked 2026-10-16
Rave: A Modular and Extensible Framework for Program State Re-Randomization
Blackburn, C.; Wang, X.; Ravindran, B. · ACM MTD Workshop · 2022
peer-reviewed
supports D075
Source opened and checked 2026-10-16
Toward Proactive, Adaptive Defense: A Survey on Moving Target Defense
Cho, J.-H. et al. · arXiv:1909.08092 · 2019
peer-reviewed
supports D080
Source opened and checked 2026-10-16
Deception in Dynamic Web Application Honeypots: Case of Glastopf
Mphago, B. · DOI 10.17781/P002304 · 2017
peer-reviewed
supports D078D079
evidence for T1190
Source opened and checked 2026-10-16
Not What You've Signed Up For: Compromising Real-World LLM-Integrated Applications with Indirect Prompt Injection
Greshake, K.; Abdelnabi, S.; Mishra, S.; Endres, C.; Holz, T.; Fritz, M. · arXiv:2302.12173 · 2023
peer-reviewed
supports D051
evidence for T1213
Source opened and checked 2026-10-16
LLM Agent Honeypot: Monitoring AI Hacking Agents in the Wild
Reworr; Volkov, D. · arXiv:2410.13919 · 2024
peer-reviewed
supports D050D073
evidence for T1213
Source opened and checked 2026-10-16
LLM Honeypot: Leveraging Large Language Models as Advanced Interactive Honeypot Systems
Otal, H.T.; Canbaz, M.A. · arXiv:2409.08234 · 2024
peer-reviewed
supports D050D073
evidence for T1699
Source opened and checked 2026-10-16
When MCP Servers Attack: Taxonomy, Feasibility, and Mitigation
Zhao, W.; Liu, J.; Ruan, B.; Li, S.; Liang, Z. · arXiv:2509.24272 · 2025
peer-reviewed
supports D050
Source opened and checked 2026-10-16
Crabs: Consuming Resource via Auto-generation for LLM-DoS Attack under Black-box Settings
Zhang, Y. et al. · arXiv:2412.13879 · 2024
peer-reviewed
supports D072
Source opened and checked 2026-10-16
Clawdrain: Exploiting Tool-Calling Chains for Stealthy Token Exhaustion in OpenClaw Agents
Dong, B.; Feng, H.; Wang, Q. · arXiv:2603.00902 · 2026
peer-reviewed
supports D072
Source opened and checked 2026-10-16
Detecting RAG Extraction Attack via Dual-Path Runtime Integrity Game (CanaryRAG)
Xie, Y. et al. · arXiv:2604.10717 · 2026
peer-reviewed
supports D071
evidence for T1213T1700
Source opened and checked 2026-10-16
Dataset Protection via Watermarked Canaries in Retrieval-Augmented LLMs
Liu, Y.; Zhao, X.; Song, D.; Bu, Y. · arXiv:2502.10673 · 2025
peer-reviewed
supports D071
evidence for T1700
Source opened and checked 2026-10-16
A Survey of Honeypots and Honeynets for Internet of Things, Industrial Internet of Things, and Cyber-Physical Systems
Franco, J.; Aris, A.; Canberk, B.; Uluagac, A. S. · IEEE COMST · 2021
peer-reviewed
supports D061
Source opened and checked 2026-10-16
Exploring Honeypot as a Deception and Trigger Mechanism for Real-Time Attack Detection in Software-Defined Networking
Khalid, H. Y.; Aldabagh, N. B. · Int. J. Computing and Digital Systems 16(1) · 2024
peer-reviewed
supports D062
Source opened and checked 2026-10-16
Container Orchestration Honeypot: Observing Attacks in the Wild
Spahn, N.; Hanke, N.; Holz, T.; Kruegel, C.; Vigna, G. · RAID · 2023
peer-reviewed
supports D048D049D064D066D067D012D011
evidence for T1133T1059T1059.004T1610T1098.004T1543.005T1053.007T1611T1496T1496.001T1105
Source opened and checked 2026-10-16
Microservice-Oriented Cyber Deception Platform with Containerized Honeypots and Real-Time Telemetry
Shahzad, M.; Saleh, M. H. · MDPI Journal of Cybersecurity and Privacy 6(4) · 2026
peer-reviewed
supports D065
Source opened and checked 2026-10-16
Mitigating Data Exfiltration in Storage-as-a-Service Clouds
Wilson, D.; Avery, J. · arXiv · 2016
peer-reviewed
supports D070
Source opened and checked 2026-10-16
PHANTOM: Polymorphic Honeytoken Adaptation with Narrative-Tailored Organisational Mimicry
Weinberg, A.I. · arXiv:2605.02992 · 2026
peer-reviewed
supports D076D082
Source opened and checked 2026-10-16
Deception Techniques in Computer Security: A Research Perspective
Han, X.; Kheir, N.; Balzarotti, D. · ACM Computing Surveys 51(4) · 2018
peer-reviewed
supports D059
Source opened and checked 2026-10-16
SoK: P2PWNED — Modeling and Evaluating the Resilience of Peer-to-Peer Botnets
Rossow, C. et al. · IEEE S&P · 2013
peer-reviewed
supports D052D053
Source opened and checked 2026-10-16
Automating the Injection of Believable Decoys to Detect Snooping
Bowen, B.; Kemerlis, V.; Prabhu, P.; Keromytis, A.; Stolfo, S. · ACM WiSec · 2010
peer-reviewed
supports D026
evidence for T1040
Source opened and checked 2026-10-16
BotSwindler: Tamper Resistant Injection of Believable Decoys in VM-Based Hosts for Crimeware Detection
Bowen, B.; Prabhu, P.; Kemerlis, V.; Sidiroglou, S.; Keromytis, A.; Stolfo, S. · RAID · 2010
peer-reviewed
supports D087
evidence for T1056
Source opened and checked 2026-10-16
Baiting Inside Attackers Using Decoy Documents
Bowen, B.; Hershkop, S.; Keromytis, A.; Stolfo, S. · SecureComm · 2009
peer-reviewed
supports D018D038
Source opened and checked 2026-10-16
Deception-Based Proactive Defense Against Ransomware in VMware ESXi Systems
Nguyen, A.-N.; Tran Thi, T. T.; Tran, H.-H.; Do, M.-Q.; Nguyen, N.-N.; Trinh, T.-S.; Luu, M.-T.; Ngo, T.-S. · ASIANComNet · 2024
peer-reviewed
supports D085
evidence for T1486T1675T1673
Source opened and checked 2026-10-16
Spamalytics: An Empirical Analysis of Spam Marketing Conversion
Kanich, C. et al. · ACM CCS · 2008
peer-reviewed
supports D053
Source opened and checked 2026-10-17

Research preprints & datasets 4

Decoys Cannot Go Everywhere: Mapping the Deception Surface in MITRE ATT&CK (companion data)
Valeros, V.; Catania, C.; Lisý, V.; Griffioen, H. · Stratosphere Laboratory, Czech Technical University in Prague · 2026
preprint
supports D083D084D085D055
evidence for T1190T1612T1649T1654T1072T1602T1594T1615T1555T1218T1217T1677T1482T1057T1210T1593T1566T1598T1651T1221T1220T1216
Source opened and checked 2026-10-16
Beyond Pattern Matching: Seven Cross-Domain Techniques for Prompt Injection Detection
Munirathinam, T. · · 2026
preprint
supports D088
evidence for T1698T1700
Source opened and checked 2026-10-16
Setup Complete, Now You Are Compromised: Weaponizing Setup Instructions Against AI Coding Agents
Bagmar, A.; Saraf, P. · arXiv:2607.15143 · 2026
preprint
supports D077
Source opened and checked 2026-10-16
Koney: A Cyber Deception Orchestration Framework for Kubernetes
Kahlhofer, M.; Golinelli, M.; Rass, S. · arXiv:2504.02431 · 2025
preprint
supports D029
evidence for T1046
Source opened and checked 2026-10-16

Industry research 36

LaBrea: "Sticky" Honeypot and IDS (project page)
Liston, T. · · 2001
industry
supports D046D054
Source opened and checked 2026-10-16
Canarytokens
Thinkst Applied Research
industry
supports D018D076D081
Source opened and checked 2026-10-16
Deceptive defense: best practices for identity-based honeytokens in Microsoft Defender for Identity
Microsoft · 2023
industry
supports D001D003D005
Source opened and checked 2026-10-16
Deploy and monitor Azure Key Vault honeytokens with Microsoft Sentinel
Microsoft
industry
supports D020D036
evidence for T1555.006T1555
Source opened and checked 2026-10-16
2023 Honeypotting in the Cloud Report
Orca Security · 2023
industry
supports D011D015D006D014D016
evidence for T1078T1078.004T1552T1552.001T1530
Source opened and checked 2026-10-16
How Credential Harvesting Traps Help Detect Attackers Before Privilege Escalation
Fidelis Security · 2026
industry
supports D043D040
evidence for T1003.004T1003.001
Source opened and checked 2026-10-16
Browser Honeytoken Detection for Infostealers
Hookset · 2026
industry
supports D044D010
evidence for T1539T1555.003T1550.004
Source opened and checked 2026-10-16
A simple and effective way to detect Broadcast Name Resolution Poisoning
Walker, W. · Praetorian · 2021
industry
supports D047
evidence for T1557T1557.001
Source opened and checked 2026-10-16
Deploying honeytokens in Active Directory & deceptive BloodHound paths
Freingruber, R. (APT29a) · APT29a Security Blog · 2019
industry
supports D056D057
evidence for T1558.003
Source opened and checked 2026-10-16
Detection of Breach Campaigns by using Distributed Deception
Acalvio
industry
supports D058
Source opened and checked 2026-10-16
Honeytoken Deployment Strategies
GitGuardian
industry
supports D076
Source opened and checked 2026-10-16
Whaler — Docker Daemon API honeypot
oncyberblog (GitHub)
industry
supports D067
Source opened and checked 2026-10-16
SaaS Attack Techniques
Push Security
industry
supports D068
Source opened and checked 2026-10-16
Implementer's Guide to Deception Technologies
SANS Institute · 2020
industry
supports D069
Source opened and checked 2026-10-16
CloudKeys in the Air: Tracking Malicious Operations of Exposed IAM Keys
Palo Alto Networks Unit 42 · 2023
industry
supports D006D041
evidence for T1078T1078.004T1552T1552.001T1021.007T1213.003T1496T1496.001
Source opened and checked 2026-10-16
Docker Honeypot Reveals Cryptojacking as Most Common Cloud Threat
Palo Alto Networks Unit 42 · 2021
industry
supports D067
evidence for T1610T1496T1496.001
Source opened and checked 2026-10-16
Microsoft Defender for Identity classic security alerts (honeytoken alerts 2014, 2427, 2428, 2429)
Microsoft
industry
supports D003D002
evidence for T1078T1078.001T1098T1556.006T1110T1110.003T1621T1531T1033T1069T1087.002T1069.002T1589T1087T1134
Source opened and checked 2026-10-16
DCEPT — Domain Controller Enticing Password Tripwire
Secureworks
industry
supports D043
evidence for T1003T1003.001
Source opened and checked 2026-10-16
AWS API Keys token — Canarytokens documentation
Thinkst Applied Research
industry
supports D006D007
evidence for T1078T1078.004T1136T1136.003T1528T1552T1552.001T1021.007T1550T1213.003T1550.001
Source opened and checked 2026-10-16
Logging management events — AWS CloudTrail User Guide
Amazon Web Services
industry
supports D001D005D016D042
evidence for T1199T1098T1098.001T1098.003T1136T1136.003T1525T1546T1556T1484T1484.002T1578T1578.001T1069.003T1087.004T1538T1580T1021.008T1485T1490T1685.002T1070T1685T1651T1686.001
Source opened and checked 2026-10-16
Canarytokens token guides (MS Word, Windows Directory, Network Folder, Kubeconfig, AWS Infrastructure, DNS, Azure Login Certificate, MySQL Dump)
Thinkst Applied Research
industry
supports D008D017D018D019D020D021D039D015D024D009
evidence for T1609T1098.006T1552.007T1649T1526T1580T1613T1080T1550T1119T1213.006T1530T1594T1025T1135T1005T1555T1011T1560T1217T1083T1590T1039T1550.001
Source opened and checked 2026-10-16
Ransomware in the honeypot: how we capture keys with sticky canary files
Bitam, S.; Alladoum, C. · Elastic Security Labs · 2024
industry
supports D018
evidence for T1486
Source opened and checked 2026-10-16
GitGuardian Honeytoken — core concepts
GitGuardian
industry
supports D006D076D007D014D031
evidence for T1552.001T1072T1213T1213.003T1677
Source opened and checked 2026-10-16
Detection of Breach Campaigns by using Distributed Deception
Acalvio · 2026
industry
supports D058D043D040
evidence for T1552.002T1555.003T1003.001T1012
Source opened and checked 2026-10-16
Deception Engineering: exploring the use of Windows Service Canaries against ransomware
Whitehouse, O. · NCC Group · 2021
industry
supports D086
evidence for T1489T1685
Source opened and checked 2026-10-16
4663(S) An attempt was made to access an object
Microsoft
industry
supports D058D018D017D083
evidence for T1053.005T1037T1547T1552.002T1053T1552.006T1565T1574T1570T1012
Source opened and checked 2026-10-16
4670(S) Permissions on an object were changed
Microsoft
industry
supports D018
evidence for T1222
Source opened and checked 2026-10-16
Use MailItemsAccessed to investigate compromised accounts
Microsoft
industry
supports D003
evidence for T1114
Source opened and checked 2026-10-16
Microsoft Entra security operations for applications
Microsoft
industry
supports D069
evidence for T1098.001T1671
Source opened and checked 2026-10-16
Logging data events — AWS CloudTrail User Guide
Amazon Web Services
industry
supports D013D015
evidence for T1648T1485
Source opened and checked 2026-10-16
4662(S, F) An operation was performed on an object
Microsoft
industry
supports D083
evidence for T1615T1482
Source opened and checked 2026-10-16
SNMP detection service — Trapster documentation
Trapster
industry
supports D084
evidence for T1602T1602.001
Source opened and checked 2026-10-16
Hypervisor Jackpotting, Part 2: eCrime Actors Increase Targeting of ESXi Servers with Ransomware
CrowdStrike · 2021
industry
supports D085
evidence for T1486T1675T1673
Source opened and checked 2026-10-16
Tracebit for AWS — canary resources and credentials
Tracebit
industry
supports D015D019D020D021D001D006
evidence for T1548.005T1552.005T1555.006T1213.006T1555
Source opened and checked 2026-10-16
Sysmon (System Monitor) — event reference
Microsoft Sysinternals
industry
supports D045
evidence for T1055T1055.002T1055.012T1055.001
Source opened and checked 2026-10-16
Message trace in the new EAC in Exchange Online
Microsoft
industry
supports D003D055
evidence for T1534T1566.002T1566.001T1566T1598
Source opened and checked 2026-10-16

Practitioner 5

Detecting Kerberoasting Activity Part 2 – Creating a Kerberoast Service Account Honeypot
Metcalf, S. · ADSecurity.org · 2017
practitioner
supports D056D002
evidence for T1558T1558.003
Source opened and checked 2026-10-16
Cowrie — SSH and Telnet honeypot
Oosterhof, M. (maintainer) · Cowrie project (open source)
practitioner
supports D011
evidence for T1133T1059T1059.004T1059.006T1068T1082T1021T1563T1552.004T1212T1569T1105T1529
Source opened and checked 2026-10-16
Finding Passwords in SYSVOL & Exploiting Group Policy Preferences
Metcalf, S. · ADSecurity.org · 2015
practitioner
supports D083
evidence for T1552.006
Source opened and checked 2026-10-16
The UCSD Network Telescope
CAIDA, UC San Diego
practitioner
supports D063
evidence for T1595.001
Source opened and checked 2026-10-16
Respounder — detect Responder in your network
Code Express (open source)
practitioner
supports D047
evidence for T1557T1557.001
Source opened and checked 2026-10-16