Comment by nubinetwork

If you're going to go through the effort of faking honeypot/analysis tools, why not just run them?