Decoy Setup

Creating a new Decoy

Choose Navigation Menu > Decoys > Add Decoy.

Note: You need to know the network topology of the host machine in order to configure network settings manually.

Decoy Options
Option Description
Name* Hostname designation for the decoy environment.
WARNING: The hostname may be exposed to attackers! It would be wise not to use words like ‘decoy’, ‘illuria’ or ‘profilerx’.
Host* Host on which to run the decoy (for clustered environments).
DHCP† Enable for automatic network configuration.
IPv4 Address** Allocate an IPv4 address for the decoy environment.
Gateway**† Specify a gateway for network access.
DNS**† Specify a DNS resolver for the decoy environment.
Netmask**† Specify a subnet mask for the decoy environment.

*    Required

**  Required for manual network configuration

   Always disabled in cloud environments

Note for Azure users:

Before setting the IPv4 Address, please add a private IP address to the virtual machine. The IPv4 address can be dynamic or static based on your needs, but it has to be configured in Azure.

Adding Services

Services can be added to Decoys when creating them, or afterward by doing the following:

  • Choose Navigation Menu > Decoys
  • Select Details from the Actions submenu of the Decoy
  • Select the Services/Lures submenu
  • Click the ‘+’ in the submenu
Service Options
Category Service Types
File Transfer FTP, SMB
Database MySQL
Remote Login SSH, RDP