Skip to main content
Contact us
Back to canary.tools →
How can we help?
We know that sometimes the thing you're looking for is impossible to find. If you're feeling this way,
contact us
and we'll get back to you as soon as we can.
Search
Getting Started
The 4-minute setup! (using Bluetooth, on Windows 11 OS)
The 4-minute setup! (using Bluetooth, on Windows 7 OS)
Do you have tips for best deploying my birds?
The 4-minute setup! (using Bluetooth, on Windows 10 OS)
The 4-minute setup! (using Bluetooth, on MAC OSX)
Console Configuration
Configuring SAML: Duo
How can I ignore only Port Scan activity from hitting my Canary from a specific Source IP?
Global Webhook Feed
Configuring SAML: LastPass
Configuring SAML: Keycloak
Flock API Keys
Flock Management
Enabling Auto Commission for a Flock
How can I ignore IPs from hitting my Canary under a specific Flock?
How do I configure a Flock's email and/or SMS notifications?
How do I configure notifications for a generic webhook on a flock ?
How do I configure Settings and Device change control notifications on a Flock?
How do I configure Slack Webhook notifications on a flock?
Bird Setup
Customising the Files/Folders on your Canary's Windows File Share
Managing SPN Records for a bird
Which personalities/services does my Canary support?
How do I factory reset my Canary
I want to reconfigure a Canary
I have no Bluetooth or DHCP, how can I access my bird?
Managing your birds
Does Canary support multiple file shares?
How to setup DNS over HTTPS / DoH
Remotely upload files/folders to your File Share on your Canary
Canary Migration
How do I save a custom personality for my Canaries?
How do I decommission a Canary?
Service Configuration
How do I add Dynamic Banner Variables to services
Generating Industry-Specific Windows File Shares
Running Custom TCP service on all unused ports
Windows Remote Management (WinRM)
Why do custom personalities not save the whole custom file share?
Disabling Windows File Share When Domain Joined
Incidents
Finding the cause of Canary Alerts
Alert annotation: Microsoft Defender Scan
Alert Annotation: AWS API Key Canarytoken No Source IP
Local Tampering Detected Alert
Alert Annotation: Azure ATP
Alert Annotation: McAfee RSD
Cloud Canary
Unofficial - Deploying a Virtual Canary to Huawei Cloud
Launching Tailscale Canaries
How do I sign up for GCP Cloud Canaries?
Unofficial - Deploying a Virtual Canary to Alibaba Cloud
How do I create an Azure Cloud Canary?
How do I create an AWS EC2 Cloud Canary?
Virtual Canary
How to run diagnostics tests on your Virtual Canary
Unofficial - Deploying a Virtual Canary to OpenStack
Changing a local password on a Virtual Canary
How do I deploy a Virtual Canary on Hyper-V Manager
How do I deploy a Virtual Canary on VMware vSphere?
How do I deploy a Virtual Canary on VirtualBox?
Container Canaries
Docker Canaries
How do I launch a Docker Canary?
Customising Docker Canaries
Unofficial - Deploying a Container Canary to OpenShift
Security Notices
Reporting Vulnerabilities
Canary and the Apache Log4j vulnerability (CVE-2021-44228)
User Management
How can I reset 2FA/MFA on an user account?
How do I remove a users access?
How do I setup watcher access on a flock?
How do I setup manager access on a flock?
How to add additional users?
How do I setup WebAuthn for my account?
Canarytokens
Deploying Canarytokens using Crowdstrike Falcon
Active Directory Login Canarytoken
Canarytoken Overview and Use Cases
Detecting ADFS login page cloning with Canarytokens
How do I create an Azure Login Certificate Canarytoken?
How do I create a Sensitive Command Token?
DNS Troubleshooting
Exempting your Canaries from Palo Alto Firewall blocking
What network traffic do the birds generate?
What encryption is used between the Canary and Console?
Ignore-listing your Canary Console on OpenDNS
What is DNS tunnelling?
Ignore-listing your Canary Console on Cisco Umbrella
Troubleshooting
Excluding the Sensitive Command Token from Crowdstrike.
The status light is flashing Red
The status light toggles between Red and Green
The status light/LED has stayed Red
Failed to join domain: failed to set machine kerberos encryption types
Dynamic DNS disabled during AD Join
Integrations
How to deploy the Splunk Add-on and App.
How do I configure PagerDuty notifications?
IBM® QRadar® - Canary DSM Installation
How can I integrate with runZero?
Acknowledge and Delete Alerts From Your Slack Channel
FAQ
Why do I get an extra tab using Mozilla Firefox to download Canarytokens?
