Description:
Your Canaries can pretend to be various different devices on your network.
Part of this deception lies in spoofing the MAC address to match the vendor of the device you're posing as.
Network scanners such as Nmap will try to identify a device based on it's MAC prefix which is handy when it comes to faking results.
Your Canaries come preloaded with a list of common MAC prefixes that can be easily selected from.
But what if you want to make your Canary look likes it's running on not so common hardware?
Fear not, you can specify your own custom MAC prefix to make your Canary look like a robot vacuum, a boardroom projector or anything in between.
Getting Started:
To set a custom MAC prefix on your Bird, head over to it's configuration page.
- Select the Add your own Mac Prefix option from the 'MAC prefix' dropdown list.
- Enter a valid MAC prefix into the Custom MAC Prefix input that appears. (MAC Vendor Database)
- Hit the green Deploy new configuration on the bottom right of the page, to save your config.
Give it a try, and scare attackers off with a device that looks like it was built by the NSA.