Skip to main content
Contact us
Back to canary.tools →
How can we help?
We know that sometimes the thing you're looking for is impossible to find. If you're feeling this way,
contact us
and we'll get back to you as soon as we can.
Search
Getting Started
How do I access the audit trail?
The 4-minute setup! (using Bluetooth, on Windows 7 OS)
Do you have tips for best deploying my birds?
The 4-minute setup! (using Bluetooth, on Windows 10 OS)
How can I find my Canary's MAC address
The 4-minute setup! (using Bluetooth, on MAC OSX)
Console Configuration
Configuring SAML: Google Workspaces
Adding a Splunk webhook to a Flock
How do I configure Webhook notifications for Microsoft Sentinel?
Sending alerts to Microsoft Sentinel with syslog
Configuring SAML: Active Directory Federation Services
Why the random domain?
Flock Management
Enabling Auto Commission for a Flock
How do I configure a flocks email and/or SMS notifications?
How do I configure flock settings and Device change control notifications on a flock?
How do I configure notifications for a generic webhook on a flock ?
How do I configure Slack Webhook notifications on a flock?
How do I configure Webhook notifications for Microsoft Teams on a flock?
Bird Setup
Which personalities/services does my Canary support?
How do I factory reset my Canary
I want to reconfigure a Canary
I have no Bluetooth or DHCP, how can I access my bird?
Setting up the Canaries Windows File Share using remote management.
What are the bird's network requirements?
Managing your birds
How to setup DNS over HTTPS / DoH
Remotely upload files/folders to your File Share on your Canary
Canary Migration
How do I save a custom personality for my Canaries?
How do I decommission a Canary?
Assigning a static IP using remote management
Service Configuration
Windows Remote Management (WinRM)
Why do custom personalities not save the whole custom file share?
Use a custom configuration file to configure my custom webroot
Configuring your device as an Outside Bird
Remotely Joining your Canary to a Microsoft Active Directory Domain
Upload custom webroots to your Canary
Incidents
Local Tampering Detected Alert
Alert Annotation: Azure ATP
Alert Annotation: McAfee RSD
Alert Annotation: ServiceNow
Alert Annotation: Palo Alto Wildfire - PDF Token
Alert Annotation: Palo Alto Wildfire
Cloud Canary
How do I create an Azure Cloud Canary?
How do I create an AWS EC2 Cloud Canary?
How do I create a GCP Cloud Canary?
How do I move an Azure Canary to another VNET
How do I sign up for AWS EC2 Canaries?
How do I sign up for Cloud Canaries?
Virtual Canary
Unofficial - Deploying a Virtual Canary to OpenStack
Changing a local password on a Virtual Canary
How do I deploy a Virtual Canary on Hyper-V Manager
How do I deploy a Virtual Canary on VMware vSphere?
How do I deploy a Virtual Canary on VirtualBox?
How do I deploy a Virtual Canary on VMware ESXi?
Container Canaries
Docker Canaries
How do I launch a Docker Canary?
Customising Docker Canaries
Unofficial - Deploying a Container Canary to OpenShift
Security Notices
Canary and the Apache Log4j vulnerability (CVE-2021-44228)
User Management
How do I remove a users access?
How do I setup watcher access on a flock?
How do I setup manager access on a flock?
How to add additional users?
How do I setup WebAuthn for my account?
How do I turn off page transitions?
Canarytokens
Deploying Canarytokens using Crowdstrike Falcon
How do I create a Sensitive Command Token?
Mass Canarytokens deployment
Mass token deployment using Jamf
Mass token deployment using SCCM/MEM and Powershell
What are Canarytokens?
DNS Troubleshooting
Exempting your Canaries from Palo Alto Firewall blocking
What network traffic do the birds generate?
What encryption is used between the Canary and Console?
Whitelisting your Canary Console on OpenDNS
What is DNS tunnelling?
Whitelisting your Canary Console on Cisco Umbrella
Troubleshooting
The status light is flashing Red
The status light toggles between Red and Green
The status light/LED has stayed Red
Failed to join domain: failed to set machine kerberos encryption types
Dynamic DNS disabled during AD Join
Meltdown and Spectre vulnerabilities
Integrations
How to deploy the Splunk Add-on and App.
How do I configure PagerDuty notifications?
IBM® QRadar® - Canary DSM Installation
How can I integrate with Rumble?
Acknowledge and Delete Alerts From Your Slack Channel
FAQ
Why do I get an extra tab using Mozilla Firefox to download Canarytokens?
