What “personality” should I give my Canary?

You can do complex things with Canaries but you don’t need to. 

Even though Canaries will happily pose as SCADA equipment or Mainframes, a Windows personality, with a well-named fileshare, has caught attackers all over the world. 

Can it be that easy? Won’t really good attackers be suspicious? 

The answer is slightly counter-intuitive: 

Attackers who land on your network have to situate themselves.
They have to poke around. 

But won’t they ignore a server that looks suspiciously unguarded? 

Almost never. Everyone is aware of that over-provisioned server that’s been forgotten,
or that passwords.txt file.

Attackers don’t ignore things that look easy, they count on them. 

Tomorrow you can do complex things, make use of our API, and design your own services.

Today, just get your birds online. You won’t be sorry…

Ps. A long time user & want to get fancier?

Have a look at our Birding Guide: (We’ve chosen some of the more popular examples to get you accustomed to typical configurations and deployment strategies). 

Or check out our Latest Webinar

Leave a Reply

Site Footer

Discover more from Thinkst Thoughts

Subscribe now to keep reading and get access to the full archive.

Continue reading

Authored with 💚 by Thinkst