Curb Ro Service Ticket Requests: A Base Condition for Curb Roasting

Every ticket request is potentially a curb roasting opportunity. The first assumption should be that honeypot accounts will only work if they're really sophisticated and maybe even what they're exactly trying to do. If you want to go kind of hyperbolic if your sophisticated attack solution is your own honeypot account then that may not be like the best idea. You can also look for new binaries observed in the network, which i think could be super valuable for surfacing signal of interesting stuff to dig into.