Making Canary Tokens work in an intranet environment

[n1majne3]

I'm interested in using Canary Tokens within my company's intranet to track any potential security breaches. While HTTP tokens seem to work well, I've noticed that DNS tokens are not functioning properly. I'm looking for suggestions on how to get DNS tokens to work within an intranet environment.

My main goal is to be able to get the local IP of any machines that trigger the Canary Tokens. I've tested a few different methods, but haven't found a solution for DNS tokens yet.

Any suggestions or advice would be greatly appreciated. Thank you in advance!

[jayjb]

Hi @n1majne3,

Thanks for getting in touch. Could you tell me a little more about the setup in your company intranet? Its interesting that the HTTP tokens are working but not the DNS tokens. It sounds like we may just need to get your DNS records setup correctly.

[jayjb]

Hi @n1majne3,

I'm closing this issue due to inactivity. Please feel free to reopen or comment to continue the discussion.