General
Getting Started
Console Configuration
- Configuring SAML IdP-managed permissions: Azure Entra ID
- Configuring SAML IdP-managed permissions: Okta
- Enabling SAML IdP-managed permissions on your Console
- Fake AD User-Sessions on Canaries
- Adding a Panther webhook to your Canary Console
- Configuring SAML: Duo
Flock Management
- Enabling Auto Commission for a Flock
- How can I ignore IPs from hitting my Canary under a specific Flock?
- How do I configure a Flock's email and/or SMS notifications?
- How do I configure notifications for a generic webhook on a flock ?
- How do I configure Settings and Device change control notifications on a Flock?
- How do I configure Slack Webhook notifications on a flock?
Bird Setup
- Customising your Cloud or Virtual Canary on Launch
- Customising the Files/Folders on your Canary's Windows File Share
- Managing SPN Records for a bird
- Which personalities/services does my Canary support?
- How do I factory reset my Hardware Canary
- I want to reconfigure a Canary
Managing your birds
- Upload a custom share to an empty Canary File Share
- How to setup 802.1x authentication on your Canary
- Disabling reverse host lookups on your Canary
- How can I set a custom MAC address prefix on my Canary?
- Creating Breadcrumbs for your Canaries
- Does Canary support multiple file shares?
Service Configuration
- Why can't I access my Canary's fileshare? (Insecure Guest Logon Policy)
- Running a service on multiple ports
- Configuration files for custom webroots
- How do I add Dynamic Banner Variables to services
- Generating Industry-Specific Windows File Shares
- Running Custom TCP service on all unused ports
Incidents
- Alert Annotation: McAfee RSD
- Alert Annotation: GitHub Secret Scanner
- Timestamp difference on Incidents
- Notification Timezones
- Detecting Honeypot Scanners
- Remote Registry Connection Alert
Cloud Canary
- Unofficial - Deploying a Virtual Canary to Huawei Cloud
- Unofficial - How do I deploy a Canary on Oracle OCI Cloud?
- Launching Tailscale Canaries
- How do I sign up for GCP Cloud Canaries?
- Unofficial - Deploying a Virtual Canary to Alibaba Cloud
- How do I create an Azure Cloud Canary?
Virtual Canary
- Unofficial - How do I deploy a Virtual Canary on Proxmox?
- How do I deploy a Virtual Canary on OpenStack?
- Customising VMware Canaries on Deployment using ESXi
- Customising VMware Canaries on Deployment using vSphere
- How to run diagnostics tests on your Virtual Canary
- Changing a local password on a Virtual Canary
Container Canaries
Security Notices
User Management
- Creating strong passwords
- How can I reset 2FA/MFA on an user account?
- How do I remove a users access?
- How do I setup watcher access on a flock?
- How do I setup manager access on a flock?
- How to add additional users?
Canarytokens
- Canarytoken Overview and Use Cases
- Deploying Canarytokens using Crowdstrike Falcon
- How do I ignore alerts by Amazon Resource Names (ARN) on my AWS S3 Bucket Canarytoken?
- How do I create a Fake SAML IdP App Canarytoken?
- How do I install a Fake SAML IdP App Canarytoken on Entra ID?
- How do I install a Fake SAML IdP App Canarytoken on Okta?
DNS Troubleshooting
Troubleshooting
- Excluding the Sensitive Command Token from Crowdstrike.
- The status light is flashing Red
- The status light toggles between Red and Green
- The status light/LED has stayed Red
- Failed to join domain: failed to set machine kerberos encryption types
- Dynamic DNS disabled during AD Join
Integrations
- Integrating Tines with your Canary management Console
- How do I configure Webhook notifications for Elastic SIEM?
- How do I configure Webhook notifications for CrowdStrike SIEM?
- How do I configure Webhook notifications for ServiceNow?
- Adding a Cribl webhook to your Canary Console
- How do I configure Webhook notifications for DataDog?