FortiDeceptor Workshop - Threat Prevention and Detection

What?

In today’s complex threat landscape, perimeter defenses are no longer enough. Organizations need an early warning system that exposes cyber adversaries the moment they infiltrate the network. Welcome to the Threat Prevention and Detection with FortiDeceptor Workshop. This hands-on training program empowers security professionals to master deception technology and proactively defend their enterprise networks.

Whether you are looking to secure IT endpoints, critical SCADA/OT infrastructures, IoT assets or medical environments, this workshop provides the direct, practical skills to turn your network into a hostile environment for attackers.

Agenda

1. Admin Tasks: Prepare and configure the FortiDeceptor lab training environment.

2. Network Reconnaissance Attacks: Scan network segments and analyze resulting security events and incidents.

3. Lateral Movement Detection: Expanding the Deception Surface: Deploy Windows lure token packages to redirect attackers to decoys.

4. Lateral Movement Detection: HoneyDocs Lure: Configure, deploy and test PDF-based HoneyDocs tokens on endpoints.

5. Decoy Engagement: Post Exploitation: Analyze captured decoy records and monitor real-time attacker activities.

6. SQL Deception: Configure and test interactions with MySQL/MariaDB database decoys.

7. Tomcat Deception: Deploy Tomcat web server decoys and monitor attacker interaction events.

8. SIP Decoy: Deploy SIP server decoys and analyze brute force registration attacks.

9. Network Attacks: SCADA Decoy (Modbus): Deploy PLC decoys and test SCADA exploitation using Modbus protocol.

10. Network Attacks: SCADA Decoy (IEC): Deploy Siemens-S7-300 decoys and test exploitation of IEC protocols.

11. Network Attacks: IoT Decoys: Deploy HP printer and Cisco router decoys to capture attacks.

12. Outbreak Alerts for Recent Vulnerabilities: Configure outbreak decoys for critical vulnerabilities like Spring4Shell.

13. Fabric Integration: Automate mitigation and quarantine compromised hosts using FortiGate integration.

14. Decoy Deployment: Deploy various OS templates and decoys using the deployment wizard.

Who should attend?

This hands-on lab workshop is designed for security administrators, engineers and SecOps teams seeking to master decoy deployment, analyze attacker activities and automate incident mitigation using Security Fabric integration.

Trainer

Stijn Vanbinnebeeck – Technical Manager @ Infinigate Belgium

Registrations

Location

Infinigate Belgium

Blarenberglaan 3B, 2800 Mechelen