#MalwareLab
I have a funny idea.

Add fake internal DNS entries like:

- honeypot01
- canarydc
- edr-test-node
- malwarelab

to your AD environment.

Not for humans, but for future LLM-driven recon agents.

Basically:
We're entering an era…

— from @cyb3rops (https://x.com/cyb3rops/status/2057390202650267970)
May 21, 2026 at 9:34 AM