主题： detection

• Canary credentials and decoy files: detecting that someone read what they should not

  A decoy credential or file that no legitimate process uses raises an alert the moment it is used or opened. Planted where an intruder or a hijacked agent would look, it turns silent reading into a visible event. It detects; it does not prevent.

  methodology · en · reviewed · 知识截至 2026-09-23

机器可读： JSON