Honeypot

Honeypot is in the context of SOIM, honeypots can be operated locally as an additional detection methods upplementing IDS sensors, or by an external CTI service provider.

Definitions

According to the CyBOK (version 1),

Honeypot. In the context of SOIM, honeypots can be operated locally as an additional detection methods upplementing IDS sensors, or by an external CTI service provider.