Trying to understand deception tech beyond honeypots

I've been researching deception technology recently, and one thing I find interesting is how defenders can use fake assets to detect suspicious activity.

For example, imagine placing fake credentials on an internal system that no legitimate user should ever need.If someone tries to use them, that interaction gives the security team a reason to investigate.

What interests me is how this fits into a real security environment.A honeypot can detect an interaction, but how useful is that signal when you're already running EDR, SIEM, and other security tools?

I m also curious about the difference between deploying a few honeypots and using a dedicated deception platform.

For people working in cybersecurity:

Have you used any deception technology platforms in a real environment? What did you find useful and what limitations did you run into?

I'd like to learn from people who've actually worked with these systems.