Home

Setting up honeytoken to track Access Token

%3CLINGO-SUB%20id%3D%22lingo-sub-798654%22%20slang%3D%22en-US%22%3ESetting%20up%20honeytoken%20to%20track%20Access%20Token%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-798654%22%20slang%3D%22en-US%22%3E%3CP%3EI%20cannot%20seem%20to%20remember%20the%20time%20but%20I%20did%20see%20an%20information%20regarding%20honeytoken%20capability%20supported%20in%20Azure%20Active%20Directory%2C%20perhaps%20via%20Azure%20Advisor%20channel%20in%20Yammer.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EHas%20anyone%20had%20more%20information%20about%20that%3F%20Any%20recommendation%20on%20how%20to%20setting%20a%20test%20use%20case%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-798654%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EIdentity%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-916080%22%20slang%3D%22en-US%22%3ERe%3A%20Setting%20up%20honeytoken%20to%20track%20Access%20Token%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-916080%22%20slang%3D%22en-US%22%3E%3CP%3EHello!%20%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F169%22%20target%3D%22_blank%22%3E%40Thuan%20Ng%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThis%20in%20the%20doc%20section%20for%20ATP%20in%20Azure.%20Its%20brief%20but%20does%20address%20your%20question.%20Its%20a%20pretty%20cool%20concept.%20I%20have%20not%20gotten%20around%20to%20testing%20this%20but%20hopefully%20soon!%3C%2FP%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fazure-advanced-threat-protection%2Finstall-atp-step7%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fazure-advanced-threat-protection%2Finstall-atp-step7%3C%2FA%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E
Thuan Ng
MVP

I cannot seem to remember the time but I did see an information regarding honeytoken capability supported in Azure Active Directory, perhaps via Azure Advisor channel in Yammer.

 

Has anyone had more information about that? Any recommendation on how to setting a test use case?

1 Reply

Hello! @Thuan Ng 

 

This in the doc section for ATP in Azure. Its brief but does address your question. Its a pretty cool concept. I have not gotten around to testing this but hopefully soon!

https://docs.microsoft.com/en-us/azure-advanced-threat-protection/install-atp-step7