Detection & Response
Honeypot
Also: canary, decoy
A fake system or credential placed to attract attackers and alert defenders when touched.
In more detail
A decoy API key or file that nothing legitimate uses is a precise tripwire: any access is suspicious. Canary credentials in an agent's environment can reveal when it reads secrets it should not.
