DECEIVE to Defend: AI-Powered Deception feat. Edna Jonsson

March 20, 2025

This International Women’s Month, we’re celebrating leaders and supporters driving the future of threat hunting and detection engineering. Next up in our series is Edna Jonsson, a cybersecurity engineer and forever student of the trade, introducing DECEIVE—Splunk’s new DECeption with Evaluative Integrated Validation Engine.

DECEIVE brings AI-powered honeypots directly into the hands of security teams, opening new possibilities for proactive threat intelligence and modern detection strategies.

‍

Alex Hurtado

Detection Dispatch Host, Anvilogic

Edna Jonsson

Cybersecurity Engineer, Black Badge WWHF '25

Additional Resources

Launch the Snowflake Lab

Anvilogic for Snowflake

Streamline Your Detection Engineering

Podcast

Episode 45: DECEIVE to Defend: AI-Powered Deception feat. Edna Jonsson

More Episodes

March 13, 2025

HEARTH the Community-Driven Threat Hunting Project feat. Lauren Proehl

Join Alex as she hosts Lauren Proehl (Director, Global Cyber Defense at a leading FSI & Founder of THOR Collective) for a discussion on HEARTH—a community-driven threat hunting GitHub repository that you’re going to want to fork as well as the importance of community intel-sharing.

Watch Now and Get the Giveaway

February 27, 2025

Building Thorough Detections via Detection Modeling

In this episode, Andrew VanVleet walks us through detection modeling with a Detection Data Model (DDM). We'll map out an attack technique and build a thorough detection strategy using Kerberoasting (T1558.003) – cracking a password hash using Kerberos service tickets – as an example.

Watch Now and Get the Giveaway

February 13, 2025

Understanding Detection Engineering and Why Teams Struggle With It

In this episode, we break down why Detection Engineering needs to shift from one-off alert building to a proactive, structured strategy.

Watch Now and Get the Giveaway