Uploaded May 2026 | Updated September 2026, 2 weeks ago
Honeypots can help you understand the threat landscape and the risk to your organization. These deception systems have been around for a long time, and Forescout has used them to capture relevant attacks such as ransomware starting from RDP-enabled workstations, automated exploits from botnets against OT devices, manual exploits on industrial routers, complete attack chains from initial access to defacement of HMIs, as well as new payloads, scanning activity and interactions with OT protocols such as Modbus, S7 and Ethernet/IP.
Daniel discussed what kind of data can be obtained from honeypots, how that becomes threat intelligence and how asset owners can leverage data from existing honeypots or deploy their own using open-source tools to enhance their threat intelligence, detection and hunting programs.
Subscribe to Dale’s ICS Security: Friday News & Notes email here:
friday.dale-peterson.com/signup
Check out S4x27. Feb 8 - 11 in Tampa:
s4xevents.com
Honeypots can help you understand the threat landscape and the risk to your organization. These deception systems have been around for a long time, and Forescout has used them to capture relevant attacks such as ransomware starting from RDP-enabled workstations, automated exploits from botnets against OT devices, manual exploits on industrial routers, complete attack chains from initial access to defacement of HMIs, as well as new payloads, scanning activity and interactions with OT protocols such as Modbus, S7 and Ethernet/IP.
Daniel discussed what kind of data can be obtained from honeypots, how that becomes threat intelligence and how asset owners can leverage data from existing honeypots or deploy their own using open-source tools to enhance their threat intelligence, detection and hunting programs.
Subscribe to Dale’s ICS Security: Friday News & Notes email here:
friday.dale-peterson.com/signup
Check out S4x27. Feb 8 - 11 in Tampa:
s4xevents.com
