Topic: detection

• Canary credentials and decoy files: detecting that someone read what they should not

  A decoy credential or file that no legitimate process uses raises an alert the moment it is used or opened. Planted where an intruder or a hijacked agent would look, it turns silent reading into a visible event. It detects; it does not prevent.

  methodology · en · reviewed · knowledge as of 2026-09-23

Machine-readable: JSON