Using Honeyfiles to detect adversaries and infostealers with Zane Gittins

LimaCharlie

Oct 16, 2025

Defender Fridays - Using Honeyfiles to Detect Adversaries with Zane Gittins

Join us for this week's Defender Fridays as we explore using honeyfiles to detect adversaries and infostealers with Zane Gittins, IT Security Manager at Meissner Filtration Products.

At Defender Fridays, we delve into the dynamic world of information security, exploring its defensive side with seasoned professionals from across the industry. Our aim is simple yet ambitious: to foster a collaborative space where ideas flow freely, experiences are shared, and knowledge expands.

What We'll Discuss

In this episode, Zane demonstrates how to deploy honeyfiles via Velociraptor and discusses deception techniques that give defenders a home turf advantage. Learn how these decoy files serve as tripwires for early detection of compromise.

Key Topics:

Deploying honeyfiles at scale using Velociraptor and ETW
Detecting infostealers with decoy credentials and sensitive files
Using thread analysis to filter legitimate file access from injected beacons
Combining honeyfiles with canary tokens for layered detection
Tuning deception techniques for enterprise environments

Zane's LinkedIn: https://www.linkedin.com/in/zane-g-40291a152/

Register for Live Sessions

Join us every Friday at 10:30am PT for live, interactive discussions with industry experts. Whether you're a seasoned professional or just curious about the field, these sessions offer an engaging dialogue between our guests, hosts, and you – our audience.

Register here: https://limacharlie.io/defender-fridays

Subscribe to our YouTube channel and hit the notification bell to never miss a live session or catch up on past episodes on our website!