How can I integrate with runZero?

This guide shows how to link your Canary Console with runZero to enrich alerts with source information. Once set up, you can perform reverse IP lookups directly from alerts to get more context quickly.

Canary supports a lightweight integration with runZero, to discover more information about the source of an attack.

Follow the steps below to enable and use the runZero integration on your Console:

Step 1: Log in to your Console

Step 2: Open Global Settings

Click on the Gear Icon and then Global Settings.

Step 3: Check Integrations

Click on Integrations and enable runZero by toggling the menu button.

Step 4: Perform a runZero Lookup from an Incident

On any incident, click the runZero icon under Source IP, or Reverse IP Lookup, to open up a runZero search.