Getting Started
Console Configuration
- Configuring SAML: Duo
- How can I ignore only Port Scan activity from hitting my Canary from a specific Source IP?
- Global Webhook Feed
- Configuring SAML: LastPass
- Configuring SAML: Keycloak
- Flock API Keys
Flock Management
- Enabling Auto Commission for a Flock
- How can I ignore IPs from hitting my Canary under a specific Flock?
- How do I configure a Flock's email and/or SMS notifications?
- How do I configure notifications for a generic webhook on a flock ?
- How do I configure Settings and Device change control notifications on a Flock?
- How do I configure Slack Webhook notifications on a flock?
Bird Setup
- Customising the Files/Folders on your Canary's Windows File Share
- Managing SPN Records for a bird
- Which personalities/services does my Canary support?
- How do I factory reset my Canary
- I want to reconfigure a Canary
- I have no Bluetooth or DHCP, how can I access my bird?
Managing your birds
- Creating Breadcrumbs for your Canaries
- Does Canary support multiple file shares?
- How to setup DNS over HTTPS / DoH
- Remotely upload files/folders to your File Share on your Canary
- Canary Migration
- How do I save a custom personality for my Canaries?
Service Configuration
- How do I add Dynamic Banner Variables to services
- Generating Industry-Specific Windows File Shares
- Running Custom TCP service on all unused ports
- Windows Remote Management (WinRM)
- Why do custom personalities not save the whole custom file share?
- Disabling Windows File Share When Domain Joined
Incidents
- Alert Annotation: TruffleHog Scan
- Alert Annotation: Data URI Phishing
- Finding the cause of Canary Alerts
- Alert annotation: Microsoft Defender Scan
- Alert Annotation: AWS API Key Canarytoken No Source IP
- Local Tampering Detected Alert
Cloud Canary
- Unofficial - Deploying a Virtual Canary to Huawei Cloud
- Launching Tailscale Canaries
- How do I sign up for GCP Cloud Canaries?
- Unofficial - Deploying a Virtual Canary to Alibaba Cloud
- How do I create an Azure Cloud Canary?
- How do I create an AWS EC2 Cloud Canary?
Virtual Canary
- How to run diagnostics tests on your Virtual Canary
- Unofficial - Deploying a Virtual Canary to OpenStack
- Changing a local password on a Virtual Canary
- How do I deploy a Virtual Canary on Hyper-V Manager
- How do I deploy a Virtual Canary on VMware vSphere?
- How do I deploy a Virtual Canary on VirtualBox?
Container Canaries
Security Notices
User Management
- Creating strong passwords
- How can I reset 2FA/MFA on an user account?
- How do I remove a users access?
- How do I setup watcher access on a flock?
- How do I setup manager access on a flock?
- How to add additional users?
Canarytokens
- Deploying Canarytokens using Crowdstrike Falcon
- Azure Entra ID Login Token
- How do I create a Cloned CSS Token?
- Active Directory Login Canarytoken
- Canarytoken Overview and Use Cases
- Detecting ADFS login page cloning with Canarytokens
DNS Troubleshooting
Troubleshooting
- Excluding the Sensitive Command Token from Crowdstrike.
- The status light is flashing Red
- The status light toggles between Red and Green
- The status light/LED has stayed Red
- Failed to join domain: failed to set machine kerberos encryption types
- Dynamic DNS disabled during AD Join