S
ShadowMatrix CDF

Matrix Navigator

Explore the full ShadowMatrix CDF. Each column represents a phase of the deception operation lifecycle. Click any technique for detailed implementation guidance, MITRE ATT&CK mappings, and environment-specific notes. Filter by environment to see only techniques relevant to your infrastructure.

42 techniques|7 phases
⬡

Plan

6 techniques

Threat Landscape Assessment

SDF-PL01

I

Deception Objective Definition

SDF-PL02

F

Crown Jewel Identification

SDF-PL03

I

Adversary Profile Development

SDF-PL04

A

Deception Architecture Blueprint

SDF-PL05

A

Legal and Compliance Scoping

SDF-PL06

I
⬢

Prepare

6 techniques

Shadow Network Provisioning

SDF-PR01

A

Decoy Host Fabrication

SDF-PR02

A

Service Emulation Engineering

SDF-PR03

I

Synthetic Data Generation

SDF-PR04

I

Identity Ecosystem Creation

SDF-PR05

I

Monitoring Pipeline Setup

SDF-PR06

A
◆

Deploy

6 techniques

Honeypot Placement

SDF-DP01

I

Canary Token Distribution

SDF-DP02

F

Credential Trap Planting

SDF-DP03

I

Decoy Service Activation

SDF-DP04

I

Network Breadcrumb Deployment

SDF-DP05

I

Trap Document Seeding

SDF-DP06

F
◈

Lure

6 techniques

DNS Record Misdirection

SDF-LR01

F

Network Path Engineering

SDF-LR02

A

Credential Breadcrumb Trails

SDF-LR03

I

Vulnerability Surface Crafting

SDF-LR04

E

Lateral Movement Channels

SDF-LR05

A

Supply Chain Decoys

SDF-LR06

E
◉

Detect

6 techniques

Interaction Tripwire Monitoring

SDF-DT01

I

Canary Alert Processing

SDF-DT02

F

Behavioral Fingerprinting

SDF-DT03

A

Access Pattern Anomaly Detection

SDF-DT04

A

Credential Misuse Detection

SDF-DT05

I

Network Flow Surveillance

SDF-DT06

I
◎

Analyze

6 techniques

TTP Extraction and Cataloging

SDF-AN01

A

MITRE ATT&CK Correlation

SDF-AN02

I

IOC Harvesting

SDF-AN03

I

Attack Path Reconstruction

SDF-AN04

A

Adversary Capability Assessment

SDF-AN05

E

Intelligence Report Synthesis

SDF-AN06

I
◍

Respond

6 techniques

Detection Rule Engineering

SDF-RS01

A

SOC Playbook Enhancement

SDF-RS02

I

Threat Feed Enrichment

SDF-RS03

I

Infrastructure Hardening

SDF-RS04

I

Deception Environment Refresh

SDF-RS05

I

Stakeholder Reporting

SDF-RS06

F