Engage Goals: EGO0003 Elicit
Engage Approach: EAP0001 Collect
Engage Actions: EAC0016 Network Manipulation, EAC0018 Security Controls
Name of Element: Azure Web Application Firewall (WAF) Honeytrap
Description of Element:
Configure a decoy Azure WAF with intentionally permissive rules to attract attackers. Monitor traffic hitting this WAF to identify malicious patterns and gather intelligence on attack techniques.
Technical Context:
Placement: Deploy in front of a decoy web application or a non-critical service.
Requires knowledge of Azure WAF configuration and rule management.
Other:
Att&ck/Engage Mapping: T1190 Exploit Public-Facing Application, E1501 Honeytrap