Skip to main content
Contact us
Back to canary.tools →
How can we help?
We know that sometimes the thing you're looking for is impossible to find. If you're feeling this way,
contact us
and we'll get back to you as soon as we can.
Search
Getting Started
The 4-minute setup! (using Bluetooth, on Windows 7 OS)
Do you have tips for best deploying my birds?
The 4-minute setup! (using Bluetooth, on Windows 10 OS)
The 4-minute setup! (using Bluetooth, on MAC OSX)
Console Configuration
Configuring SAML: LastPass
Configuring SAML: Keycloak
Flock API Keys
Configuring SAML: Google Workspaces
Adding a Splunk webhook to a Flock
How do I configure Webhook notifications for Microsoft Sentinel?
Flock Management
Enabling Auto Commission for a Flock
How do I configure a flocks email and/or SMS notifications?
How do I configure flock settings and Device change control notifications on a flock?
How do I configure notifications for a generic webhook on a flock ?
How do I configure Slack Webhook notifications on a flock?
How do I configure Webhook notifications for Microsoft Teams on a flock?
Bird Setup
Customising the Files/Folders on your Canary's Windows File Share
Which personalities/services does my Canary support?
How do I factory reset my Canary
I want to reconfigure a Canary
I have no Bluetooth or DHCP, how can I access my bird?
Setting up the Canary's Windows File Share using remote management.
Managing your birds
How to setup DNS over HTTPS / DoH
Remotely upload files/folders to your File Share on your Canary
Canary Migration
How do I save a custom personality for my Canaries?
How do I decommission a Canary?
Assigning a static IP using remote management
Service Configuration
Running Custom TCP service on all unused ports
Windows Remote Management (WinRM)
Why do custom personalities not save the whole custom file share?
Use a custom configuration file to configure my custom webroot
Configuring your device as an Outside Bird
Remotely Joining your Canary to a Microsoft Active Directory Domain
Incidents
Local Tampering Detected Alert
Alert Annotation: Azure ATP
Alert Annotation: McAfee RSD
Alert Annotation: ServiceNow
Alert Annotation: Palo Alto Wildfire - PDF Token
Alert Annotation: Palo Alto Wildfire
Cloud Canary
How do I sign up for GCP Cloud Canaries?
Unofficial - Deploying a Virtual Canary to Alibaba Cloud
How do I create an Azure Cloud Canary?
How do I create an AWS EC2 Cloud Canary?
How do I create a GCP Cloud Canary?
How do I move an Azure Canary to another VNET
Virtual Canary
Unofficial - Deploying a Virtual Canary to OpenStack
Changing a local password on a Virtual Canary
How do I deploy a Virtual Canary on Hyper-V Manager
How do I deploy a Virtual Canary on VMware vSphere?
How do I deploy a Virtual Canary on VirtualBox?
How do I deploy a Virtual Canary on VMware ESXi?
Container Canaries
Docker Canaries
How do I launch a Docker Canary?
Customising Docker Canaries
Unofficial - Deploying a Container Canary to OpenShift
Security Notices
Canary and the Apache Log4j vulnerability (CVE-2021-44228)
User Management
How do I remove a users access?
How do I setup watcher access on a flock?
How do I setup manager access on a flock?
How to add additional users?
How do I setup WebAuthn for my account?
How do I turn off page transitions?
Canarytokens
Deploying Canarytokens using Crowdstrike Falcon
Detecting ADFS login page cloning with Canarytokens
How do I create an Azure Login Certificate Canarytoken?
How do I create a Sensitive Command Token?
Mass Canarytokens deployment
Mass token deployment using Jamf
DNS Troubleshooting
Exempting your Canaries from Palo Alto Firewall blocking
What network traffic do the birds generate?
What encryption is used between the Canary and Console?
Ignore-listing your Canary Console on OpenDNS
What is DNS tunnelling?
Ignore-listing your Canary Console on Cisco Umbrella
Troubleshooting
Excluding the Sensitive Command Token from Crowdstrike.
The status light is flashing Red
The status light toggles between Red and Green
The status light/LED has stayed Red
Failed to join domain: failed to set machine kerberos encryption types
Dynamic DNS disabled during AD Join
Integrations
How to deploy the Splunk Add-on and App.
How do I configure PagerDuty notifications?
IBM® QRadar® - Canary DSM Installation
How can I integrate with runZero?
Acknowledge and Delete Alerts From Your Slack Channel
FAQ
Why do I get an extra tab using Mozilla Firefox to download Canarytokens?
