AI—XGBoost models predict T1078 via LDAP binds. SIKE—SIDH key exchange PoCs. Honeypot—Cowrie logs SSH bruteforce. MITRE Engage—T1590 baiting. Consult teases; paid deploys.
