Skip to main content
Triggered when a honeypot SSID is detected. Alert name: ALERT_HONEYPOT_AP

​
Payload

{
  "metadata": {
    "alert_name": "ALERT_HONEYPOT_AP",
    "network_name": "Main Office",
    "timestamp": "2026-01-23T21:40:03Z"
  },
  "data": {
    "honeypot_ssids": [
      "Corporate-WiFi",
      "Free-Internet"
    ]
  }
}

​
Fields

FieldTypeDescription
honeypot_ssidsarray of stringsSSIDs detected as potential honeypots