illusive Networks

Solution Overview
WWT's Deception lab for illusive Networks allows a view into illusive Deception Everywhere Technology. This platform is designed to neutralize targeted attacks and Advanced Persistent Threats (APT) by creating a deceptive layer across the entire network. This is done by providing an extensive source of false information. This allows illusive Networks to disrupt and detects attacks, providing a real-time forensics approach without interfering with business operations.

Goals & Objectives

In this lab we have Illusive's Deception Everywhere Platform deployed into an Active Directory environment that has user data in Active Directory populated as real connections created on each endpoint in the environment. This provides a valid attack surface simulating a live customer environment and demonstrates how illusive's DMS automation can be used to auto-learn and create a deceptive policy at scale with just a few clicks.

Hardware & Software

This lab consists the following:

  • Active Directory Domain controller
  • Illusive Management Server
  • Illusive Trap Server 
  • Various Workstations
This environment also includes a demonstration map along with an Attack tool on the endpoints to demonstrate lateral movements.