How do I create a DNS Canarytoken?

Create and deploy DNS Canarytokens that trigger alerts when their unique domain names are resolved. Learn how to generate a token in the Console, add a clear reminder for its placement, and copy it to the right location so you can track suspicious activity with precise alerts.

Overview:

Step 1: Log in to the Console

Step 2: Open the Canarytokens tile

Step 3: Select the DNS token

Step 4: Add a descriptive reminder

Step 5: Copy and deploy the token

Alert

You have the ability to create a Canarytoken that has a unique Internet resolvable domain name.

Why does this matter? Once you are able to get an alert for a DNS based token, or a Web based token, you have the building blocks for squillions of possible tripwires.

Step 1: Log in to the Console

Step 2: Open the Canarytokens tile

Step 3: Select the DNS token

Select the DNS token from the list.

Step 4: Add a descriptive reminder

Over time, if you are using tokens correctly, you will deploy thousands of them all over the place. Make sure that your Reminder is as descriptive as possible, and we will remind the future you of where the token was dropped. Nothing sucks more than having a token fire an alert that reads “test" - and not knowing where you placed it.

Click Create token after adding the reminder.

Note: we chose "Placed In Jims .ssh/config File" as the reminder.

Step 5: Copy and deploy the token

Copy the token and place it in its intended location.

Alert

An alert is triggered when the domain name is resolved.