Deception and Honeypot Engineering Training Course in London | European Quality Training and Management Consultancy

Cities

London

Deception and Honeypot Engineering

ID 1105

Information Technology Telecommunication & Networking Training Courses

Course : Deception and Honeypot Engineering

London

Hotel Name
Hotel Meeting Room

07 Dec 2026 : 11 Dec 2026

25 Hours

Training Language : English

5450 USD

Other Dates And Locations

Course Application Form

Candidate Data

Candidate full name *

Email *

Private phone number *

Work phone number

Country & City *

Company / Employer *

Choose your payment method

Invoice Recipient Data

Recipient name *

Recipient phone number *

Recipient email

Recipient work address details

I agree to the property rights & terms of use.
I agree to use data sent by me.

Sending course brochure to my e-mail

Please leave us your contacts, and we will call you back as soon as possible

Full name *

Email *

Private phone number

I agree to the property rights & terms of use.
I agree to use data sent by me.

Call me back

Course Inquiry

Please provide us with your contacts with your inquiry, and we will answer it as soon as possible

Full name *

Email *

Private phone number *

Country & City *

Company / Employer *

Your Inquiry

I agree to the property rights & terms of use.
I agree to use data sent by me.

In-house proposal

Please provide us with your contacts and the details of the needed in-house proposal, and we will contact you as soon as possible

Full name *

Email *

Private phone number *

Country & City *

Company / Employer *

Your Inquiry

I agree to the property rights & terms of use.
I agree to use data sent by me.

Course-options

Training Details

About

Training Methodology

Introduction and Overview

Attackers are often inside the network for weeks before they are noticed, and traditional controls produce too many alerts and too little certainty. Deception technology reverses that: decoy systems, fake credentials, and canary assets that no legitimate user should ever touch, so any interaction is a high-confidence alert. This course teaches participants to design, deploy, and operate honeypots and deception layers across on-premises, cloud, and identity environments, and to feed what they capture into the SOC.

The course is hands-on. Participants build decoys, plant honeytokens, connect alerts to SIEM and SOAR, and use AI tools to generate realistic decoy content and triage interactions. It also covers legal, ethical, and operational risks (isolation, data confidentiality, attribution limits) so deployments are safe and defensible.

General Objectives

By the end of the course, participants will be able to:

Explain the principles of cyber deception and map them to MITRE ATT&CK, MITRE Engage, and the kill chain.
Choose the right honeypot type (low, medium, high interaction) for a given detection goal.
Deploy and harden honeypots, including isolation, logging, and containment, so they cannot become a pivot point.
Create and place honeytokens, canary files, fake credentials, and decoy Active Directory and cloud objects.
Integrate deception alerts with SIEM/SOAR and write detection rules with low false positives.
Analyze attacker behavior captured in decoys and convert it into threat intelligence and detection improvements.
Use AI responsibly to generate believable decoy data and speed up alert triage without exposing real data.
Build a deception program roadmap with metrics, governance, and legal compliance.

Target Audience

SOC analysts and incident responders
Threat hunters and detection engineers
Security architects and security engineers
Blue team and purple team members
Cloud and infrastructure security specialists
CISOs, security managers, and risk and compliance leaders

Course Outline :

Day 1: Foundations of cyber deception

Why deception works: attacker psychology, dwell time, and the economics of detection
Honeypots, honeynets, honeytokens, and canaries: definitions and use cases
MITRE ATT&CK, MITRE Engage, and mapping decoys to attacker techniques
Deception vs. traditional detection: where it fits in the security stack
Legal, ethical, and privacy considerations (entrapment, data, jurisdiction)
Lab setup: isolated environment, virtualization, and logging baseline

Day 2: Building and deploying honeypots

Interaction levels: low, medium, and high, and when to use each
Deploying common honeypots for SSH, web, SMB, RDP, and database services (e.g., Cowrie, OpenCanary, T-Pot)
Making decoys believable: banners, services, naming, and realistic content
Network placement: DMZ, internal VLANs, and segmentation
Hardening and containment so decoys never become a pivot point
Centralized logging and health monitoring of honeypots

Day 3: Honeytokens, identity, and cloud deception

Honeytokens and canary tokens: files, URLs, API keys, and database records
Decoy credentials and fake accounts in Active Directory (honey users, honey SPNs, decoy shares)
Detecting Kerberoasting, credential dumping, and lateral movement with deceptive assets
Cloud deception: decoy S3 buckets, fake IAM keys, and canary resources in AWS/Azure
Deception for data: decoy databases and documents with tracking
Placement strategy: where attackers actually look

Day 4: Detection engineering, integration, and AI

Turning decoy interactions into high-confidence alerts
SIEM integration and detection rules (Splunk, Sentinel, Elastic) with low false positives
SOAR playbooks: automatic enrichment, isolation, and ticketing on decoy hits
Using AI to generate realistic decoy content and speed up alert triage, with safeguards on data confidentiality and accuracy
Analyzing captured attacker behavior: commands, tools, and TTPs
Converting honeypot data into threat intelligence and IOCs

Day 5: Operating a deception program and capstone

Deception program design: scope, governance, ownership, and lifecycle
Metrics: time to detect, alert fidelity, coverage, and cost
Avoiding detection of the decoys by attackers (fingerprinting and anti-honeypot techniques) and maintaining freshness
Commercial deception platforms vs. open source: selection criteria
Capstone workshop: design and deploy a multi-layer deception plan for a case-study organization (network, identity, and cloud), then run a simulated intrusion and respond

Day 1 - Asset Cost Management Introduction

Maintenance & Reliability Best Practices are critical for every successful individual and company. This workshop delivers many practical and new Maintenance and Reliability Best Practices concepts and tools. You will discuss these concepts and practice using practical tools in case studies and discussion groups. The costs associated with equipment downtime and reduced production can be significant. Learning how to effectively manage all aspects of your industrial facility is a must.This workshop is a combination of instructor lead topic areas and class discussions. Interactive discussions will allow you to hear and learn best in class applications relating to maintenance planning and cost management strategies. You will have the opportunity to ask lots of questions in order to consider how best to apply these tools and techniques in your organization.

Day 2 - Laying the Groundwork

Day 3 - Applying the Value based Process

Day 4 - Ensuring the Continuity of the Value-based Process

The European Quality of Training and Management Consulting relies on advanced methodology in developing skills and enhancing the effectiveness of human resources. The company adopts modern methods to achieve these goals. In order to achieve its objectives, European Quality follows the following steps in a precise and professional manner:

Lectures and Visual Presentations:
- Theoretical lectures are presented through PowerPoint presentations, videos, and short films, providing a comprehensive and enjoyable learning experience.
Scientific Assessment:
- Trainees are thoroughly assessed before and after the training program to ensure the desired objectives are achieved and to provide necessary guidance.
Brainstorming and Role-playing:
- Innovation and problem-solving are encouraged through brainstorming sessions and role playing experiences.
Practical Cases:
- Practical learning is emphasized through cases relevant to the subject matter and the nature of work for the trainees, contributing to the development of practical skills.
Final Evaluation and Certificates:
- A comprehensive assessment is conducted at the end of the program. Trainees are awarded attendance and participation certificates recognized by the European Quality Training and Management Consultancy , provided they have completed at least 80% of the program days.
Training Materials:
- Professional trainers and experts in various fields create scientific and practical training materials, which are printed and retained, and distributed on CD or flash drives to ensure easy access to the content.
Post-Training Follow-up:
- European Quality Training and Management Consultancy provides continuous support after the training program. This support includes additional consultancy sessions or workshops to ensure the continuity of learning and the application of acquired skills in the working environment.
Customized Training Programs:
- Training programs are designed to meet the needs of individual companies and institutions. Client needs are carefully analyzed to ensure that the training content aligns with their specific objectives and achieves the desired impact.
Utilizing Technology:
- Training incorporates modern techniques such as online platforms and distance learning to provide flexible and effective learning experiences. Participants can access educational resources online and engage in discussions and online workshops.
Specialized Trainers:
- Trainers and lecturers are carefully selected to ensure they have high expertise in their fields. Experience and professionalism are added to the training to ensure the delivery of high-quality content and effective learning experiences.
Encouraging Participation:
- European Quality Training and Management Consultancy encourages active participation and interaction during training sessions. Interactive activities such as group discussions and collective exercises are organized to stimulate effective participation in the learning process.
Focus on Personal Transformation:
- Participants are encouraged to think critically and develop problem-solving skills and decision making abilities. They are guided towards achieving personal and professional transformation, leading to improved performance in their work areas.
Continuous Assessment:
- Continuous assessments are provided to evaluate participants performance and their understanding of the training materials. This assessment is used to modify the training program if necessary and ensure the desired results are achieved.
Terms and Conditions:
- Terms and conditions apply to all training programs. It is assumed that registering for any training program implies the participants agreement to these terms, including registration, payment, and cancellation policies.
Prices and Discounts:
- It is noted that the prices displayed on the website do not include a 5% value added tax. All prices are subject to discounts according to the companys policies.

European Quality Training and Management Consultancy of Training and Management Consulting reserves the right to change the location of the training program, change the accredited lecturers for program delivery, hold, or cancel the program in line with the companys vision and program conditions and our quality policy.

European Quality Training and Management Consultancy is certified

ISO 9001-2015

Course Options

Training other dates & Locations

Download PDF

07 Dec 2026 : 11 Dec 2026

London

5450$

PLC Telemetry and SCADA Technologies

ID 19

One week

Course Details

Dates & Locations

Computer Application Skills for Engineers and Managers

ID 172

One week

Course Details

Dates & Locations

Construction Site Management & Supervision

ID 245

One week

Course Details

Dates & Locations

IT Project Management

ID 248

One week

Course Details

Dates & Locations

Strategic IT Leadership

ID 307

Two weeks

Course Details

Dates & Locations

Data Management, Manipulation and Analysis using Excel

ID 473

One week

Course Details

Dates & Locations

Enterprise Data Security & Risk Management

ID 474

One week

Course Details

Dates & Locations

Information Security Management

ID 475

One week

Course Details

Dates & Locations

Electronic Document Management System with Business Process Automation

ID 480

One week

Course Details

Dates & Locations

Advanced CAD Quality & Productivity Management

ID 481

One week

Course Details

Dates & Locations

IT Service Management

ID 483

One week

Course Details

Dates & Locations

Information Management Compliance

ID 484

One week

Course Details

Dates & Locations

At European Quality Training and Management Consultancy, we provide high-quality training and consultancy services to develop future leaders. With a team of skilled experts, we tailor programs to meet the needs of public and private sectors, grounded in quality, ethics, and social responsibility. Our client-focused approach ensures professionalism and sustainable outcomes.

European Quality Training and Management Consultancy FZE

REG NO : 13785/2018

VAT NO : 100528683400003

LEI: 98450084C0285A104868

D-U-N-S Number®: 85-011-6689

Recieve Our News

Subscribe now to our mailing list and keep up to date with our offers and news.

00971563356098⁩ - 00971566356223

info@europeanqualitytc.com || europeanqualitytc@hotmail.com

United Arab Emirates - Fujairah

Payment Methods

Chat with Us

Checking...

Your Full Name

Please provide a name between 3 and 200 characters without any links.

Contact Email

A valid email address is required.

Phone (Optional)

Your phone number must have at least 10 digits.

Country & City (Optional)

Please enter a valid country or city name.

Your Request / Inquiry

Message must be 3–200 characters long and not contain links.