I came across
this article today, which I thought was super interesting. The author conducted an experiment where he stood up an RDP honeypot on his experimental network with a Windows VM. He ended up sniffing out a few attackers using various methods and tools to hack their way through his VM. Super interesting stuff!
Full article here »