Skip to main content
Contact us
Back to canary.tools →
How can we help?
We know that sometimes the thing you're looking for is impossible to find. If you're feeling this way,
contact us
and we'll get back to you as soon as we can.
Search
Getting Started
The 4-minute setup! (using Bluetooth, on Windows 11 OS)
Do you have tips for best deploying my birds?
The 4-minute setup! (using Bluetooth, on Windows 10 OS)
The 4-minute setup! (using DHCP, on MacOS)
Console Configuration
Configuring SAML IdP-managed permissions: Azure Entra ID
Configuring SAML IdP-managed permissions: Okta
Enabling SAML IdP-managed permissions on your Console
Fake AD User-Sessions on Canaries
Adding a Panther webhook to your Canary Console
Configuring SAML: Duo
Flock Management
Enabling Auto Commission for a Flock
How can I ignore IPs from hitting my Canary under a specific Flock?
How do I configure a Flock's email and/or SMS notifications?
How do I configure notifications for a generic webhook on a flock ?
How do I configure Settings and Device change control notifications on a Flock?
How do I configure Slack Webhook notifications on a flock?
Bird Setup
Customising your Cloud or Virtual Canary on Launch
Customising the Files/Folders on your Canary's Windows File Share
Managing SPN Records for a bird
Which personalities/services does my Canary support?
How do I factory reset my Hardware Canary
I want to reconfigure a Canary
Managing your birds
Upload a custom share to an empty Canary File Share
How to setup 802.1x authentication on your Canary
Disabling reverse host lookups on your Canary
How can I set a custom MAC address prefix on my Canary?
Creating Breadcrumbs for your Canaries
Does Canary support multiple file shares?
Service Configuration
Why can't I access my Canary's fileshare? (Insecure Guest Logon Policy)
Running a service on multiple ports
Configuration files for custom webroots
How do I add Dynamic Banner Variables to services
Generating Industry-Specific Windows File Shares
Running Custom TCP service on all unused ports
Incidents
Excluding your Canaries in Microsoft Defender
Alert Annotation: McAfee RSD
Alert Annotation: GitHub Secret Scanner
Timestamp difference on Incidents
Notification Timezones
Detecting Honeypot Scanners
Cloud Canary
Unofficial - Deploying a Virtual Canary to Huawei Cloud
How do I create an Oracle Cloud (OCI) Canary?
Unofficial - How do I deploy a Canary on Oracle OCI Cloud?
Launching Tailscale Canaries
How do I sign up for GCP Cloud Canaries?
Unofficial - Deploying a Virtual Canary to Alibaba Cloud
Virtual Canary
How do I deploy a Virtual Canary to Nutanix AHV?
Unofficial - How do I deploy a Virtual Canary on Proxmox?
How do I deploy a Virtual Canary on OpenStack?
Customising VMware Canaries on Deployment using ESXi
Customising VMware Canaries on Deployment using vSphere
How to run diagnostics tests on your Virtual Canary
Container Canaries
Docker Canaries
How do I launch a Docker Canary?
Customising Docker Canaries
Deploying a Container Canary to OpenShift
Security Notices
Reporting Vulnerabilities
Canary and the Apache Log4j vulnerability (CVE-2021-44228)
User Management
Creating strong passwords
How can I reset 2FA/MFA on an user account?
How do I remove a users access?
How do I setup watcher access on a flock?
How do I setup manager access on a flock?
How to add additional users?
Canarytokens
Canarytoken Overview and Use Cases
Deploying Canarytokens using Crowdstrike Falcon
How do I ignore alerts by Amazon Resource Names (ARN) on my AWS S3 Bucket Canarytoken?
How do I create a Fake SAML IdP App Canarytoken?
How do I install a Fake SAML IdP App Canarytoken on Entra ID?
How do I install a Fake SAML IdP App Canarytoken on Okta?
DNS Troubleshooting
Exempting your Canaries from Palo Alto Firewall blocking
What network traffic do the birds generate?
What encryption is used between the Canary and Console?
Ignore-listing your Canary Console on OpenDNS
What is DNS tunnelling?
Ignore-listing your Canary Console on Cisco Umbrella
Troubleshooting
Excluding the Sensitive Command Token from Crowdstrike.
The status light is flashing Red
The status light toggles between Red and Green
The status light/LED has stayed Red
Failed to join domain: failed to set machine kerberos encryption types
Dynamic DNS disabled during AD Join
Integrations
Integrating Tines with your Canary management Console
How do I configure Webhook notifications for Rapid7 InsightIDR?
How do I configure Webhook notifications for Elastic SIEM?
How do I configure Webhook notifications for CrowdStrike SIEM?
How do I configure Webhook notifications for ServiceNow?
Adding a Cribl webhook to your Canary Console
Announcements
MS Teams Webhooks Retiring
FAQ
Why do I get an extra tab using Mozilla Firefox to download Canarytokens?