Honeypot access point
Triggered when a honeypot SSID is detected.
Alert name: ALERT_HONEYPOT_AP
Payload
{
"metadata": {
"alert_name": "ALERT_HONEYPOT_AP",
"network_name": "Main Office",
"timestamp": "2026-01-23T21:40:03Z"
},
"data": {
"honeypot_ssids": [
"Corporate-Wi-Fi",
"Free-Internet"
]
}
}Fields
| Field | Type | Description |
|---|---|---|
honeypot_ssids | array of strings | SSIDs detected as potential honeypots |