This guidance helps defensive teams at varying levels of cybersecurity maturity incorporate decoy capabilities into their cyber defense planning to detect and distract adversaries, collect cyber threat intelligence, and respond early in the intrusion lifecycle.