Security Notices
Getting Started
Console Configuration
- Adding a Splunk webhook to a Flock
- How do I configure Webhook notifications for Microsoft Sentinel?
- Sending alerts to Microsoft Sentinel with syslog
- Configuring SAML: Active Directory Federation Services
- Why the random domain?
- Configuring AWS SSO as a SAML IdP
Bird Setup
- Which personalities/services does my Canary support?
- How do I factory reset my Canary
- I want to reconfigure a Canary
- I have no Bluetooth or DHCP, how can I access my bird?
- Setting up the Canaries Windows File Share using remote management.
- What are the bird's network requirements?
Service Configuration
- Windows Remote Management (WinRM)
- Why do custom personalities not save the whole custom file share?
- Use a custom configuration file to configure my custom webroot
- Configuring your device as an Outside Bird
- Remotely Joining your Canary to a Microsoft Active Directory Domain
- Upload custom webroots to your Canary
Flock Management
- Enabling Auto Commission for a Flock
- How do I configure a flocks email and/or SMS notifications?
- How do I configure flock settings and Device change control notifications on a flock?
- How do I configure notifications for a generic webhook on a flock ?
- How do I configure Slack Webhook notifications on a flock?
- How do I configure Webhook notifications for Microsoft Teams on a flock?
Managing your birds
- How to setup DNS over HTTPS / DoH
- Remotely upload files/folders to your File Share on your Canary
- Canary Migration
- How do I save a custom personality for my Canaries?
- How do I decommission a Canary?
- Assigning a static IP using remote management
Incidents
- Local Tampering Detected Alert
- Alert Annotation: Azure ATP
- Alert Annotation: McAfee RSD
- Alert Annotation: ServiceNow
- Alert Annotation: Palo Alto Wildfire - PDF Token
- Alert Annotation: Palo Alto Wildfire
Cloud Canary
- How do I create an Azure Cloud Canary?
- How do I create an AWS EC2 Cloud Canary?
- How do I create a GCP Cloud Canary?
- How do I move an Azure Canary to another VNET
- How do I sign up for AWS EC2 Canaries?
- How do I sign up for Cloud Canaries?
Virtual Canary
- Unofficial - Deploying a Virtual Canary to OpenStack
- Changing a local password on a Virtual Canary
- How do I deploy a Virtual Canary on Hyper-V Manager
- How do I deploy a Virtual Canary on VMware vSphere?
- How do I deploy a Virtual Canary on VirtualBox?
- How do I deploy a Virtual Canary on VMware ESXi?
Container Canaries
User Management
- How do I remove a users access?
- How do I setup watcher access on a flock?
- How do I setup manager access on a flock?
- How to add additional users?
- How do I setup WebAuthn for my account?
- How do I turn off page transitions?
DNS Troubleshooting
Troubleshooting
- The status light is flashing Red
- The status light toggles between Red and Green
- The status light/LED has stayed Red
- Failed to join domain: failed to set machine kerberos encryption types
- Dynamic DNS disabled during AD Join
- Meltdown and Spectre vulnerabilities
Canarytokens
- Mass Canarytokens deployment
- Mass token deployment using Jamf
- Mass token deployment using SCCM/MEM and Powershell
- What are Canarytokens?
- AWS API Key Canarytoken (safety-net) triggered
- Using a Canarytoken to help test for CVE-2021-44228 (log4j/log4shell)