Getting Started
Console Configuration
- Configuring SAML: LastPass
- Configuring SAML: Keycloak
- Flock API Keys
- Configuring SAML: Google Workspaces
- Adding a Splunk webhook to a Flock
- How do I configure Webhook notifications for Microsoft Sentinel?
Flock Management
- Enabling Auto Commission for a Flock
- How do I configure a flocks email and/or SMS notifications?
- How do I configure flock settings and Device change control notifications on a flock?
- How do I configure notifications for a generic webhook on a flock ?
- How do I configure Slack Webhook notifications on a flock?
- How do I configure Webhook notifications for Microsoft Teams on a flock?
Bird Setup
- Customising the Files/Folders on your Canary's Windows File Share
- Which personalities/services does my Canary support?
- How do I factory reset my Canary
- I want to reconfigure a Canary
- I have no Bluetooth or DHCP, how can I access my bird?
- Setting up the Canary's Windows File Share using remote management.
Managing your birds
- How to setup DNS over HTTPS / DoH
- Remotely upload files/folders to your File Share on your Canary
- Canary Migration
- How do I save a custom personality for my Canaries?
- How do I decommission a Canary?
- Assigning a static IP using remote management
Service Configuration
- Running Custom TCP service on all unused ports
- Windows Remote Management (WinRM)
- Why do custom personalities not save the whole custom file share?
- Use a custom configuration file to configure my custom webroot
- Configuring your device as an Outside Bird
- Remotely Joining your Canary to a Microsoft Active Directory Domain
Incidents
- Local Tampering Detected Alert
- Alert Annotation: Azure ATP
- Alert Annotation: McAfee RSD
- Alert Annotation: ServiceNow
- Alert Annotation: Palo Alto Wildfire - PDF Token
- Alert Annotation: Palo Alto Wildfire
Cloud Canary
- How do I sign up for GCP Cloud Canaries?
- Unofficial - Deploying a Virtual Canary to Alibaba Cloud
- How do I create an Azure Cloud Canary?
- How do I create an AWS EC2 Cloud Canary?
- How do I create a GCP Cloud Canary?
- How do I move an Azure Canary to another VNET
Virtual Canary
- Unofficial - Deploying a Virtual Canary to OpenStack
- Changing a local password on a Virtual Canary
- How do I deploy a Virtual Canary on Hyper-V Manager
- How do I deploy a Virtual Canary on VMware vSphere?
- How do I deploy a Virtual Canary on VirtualBox?
- How do I deploy a Virtual Canary on VMware ESXi?
Container Canaries
Security Notices
User Management
- How do I remove a users access?
- How do I setup watcher access on a flock?
- How do I setup manager access on a flock?
- How to add additional users?
- How do I setup WebAuthn for my account?
- How do I turn off page transitions?
Canarytokens
- Deploying Canarytokens using Crowdstrike Falcon
- Detecting ADFS login page cloning with Canarytokens
- How do I create an Azure Login Certificate Canarytoken?
- How do I create a Sensitive Command Token?
- Mass Canarytokens deployment
- Mass token deployment using Jamf
DNS Troubleshooting
Troubleshooting
- Excluding the Sensitive Command Token from Crowdstrike.
- The status light is flashing Red
- The status light toggles between Red and Green
- The status light/LED has stayed Red
- Failed to join domain: failed to set machine kerberos encryption types
- Dynamic DNS disabled during AD Join