Honeypots are a conventional form of threat detection. Rather than engaging an attacker, honeypots are designed to examine and learn from attackers and their attempts. Honeypots differ from threat sensors as they are traditionally leveraged to investigate and study how cybercriminals operate – not engage, surface, and divert ongoing attacks. Honeypots are commonly a network-attacked, full operating system – making them more resource-heavy to develop, monitor, and maintain.