Honeypot entity and method of operating the same

The present disclosure relates generally to the field of information technology (IT) and network security, and particularly discloses a honeypot entity. The honeypot entity is configured to receive a command of a user, and determine if an assessment of the received command is required. If the assessment is required the entity is configured to retrieve a first set of command outputs associated with the command from backend systems, and populate a knowledge base with the command and the first set of command outputs. Further, the entity is configured to retrieve a second set of command outputs from the knowledge base, and select a command output of the second set in dependence of a policy. The entity is then configured to output the selected command to the user, and adapt the policy in dependence of an interaction history associated with the user and an immediate reward associated with the selected command.