Technical Tip: How to deploy Honeydoc to maximize the deception surface

[pchee]

Description	This article describes how to deploy Honeydoc to maximize the deception surface.
Scope	FortiDeceptor all models.
Solution	Navigate under Deception -> Deception Token -> Token Campaign. Select the '+Campaign' button. Provide a Campaign Name and select the mode: Online or Offline. Specify the Lur type as HoneyDoc and provide a HoneyDoc Installation Path. On the lure-targeted PC/ server device, access the FortiDeceptor web UI and navigate under the Deception -> Deception Token -> Token Campaign again to download the package by selecting the circled icon. Install the downloaded package. Lure files will be injected into the targeted device from the FortiDeceptor server. Check the deployment status under the Token Deployment status and make sure it is showing success. When an attacker accesses to Honeydoc folder and tries to read/change/modify it will be recorded under the Incident -> Analysis.