This token creates a real CrowdStrike API credential pair. When those credentials are used, you get an alert letting you know.
Follow the steps below to create a Crowdstrike API Key Canarytoken:
Step 1: Log in to your Console
Step 2: Click the Canarytokens Tile
Step 3: Select Crowdstrike API Key Canarytoken
Step 4: Create a Reminder for Canarytoken
Over time, if you are using Canarytokens correctly, you will deploy thousands of them all over the place. Make sure that your Reminder is as descriptive as possible, and we will remind the future you of where the Canarytoken was dropped. Nothing sucks more than having a Canarytoken fire an alert that reads "test" — and not knowing where you placed it.
We chose "CrowdStrike API key left on the CI runner" as the reminder.
Step 5: Download Canarytoken
Download or copy the Canarytoken and place it in its intended location.
Alert
An alert is triggered when the Crowdstrike API key is used.