Skip to content

Conversation

@thinkst-quinn
Copy link
Contributor

Proposed changes

The recent Breadcrumbs work introduced a number of changes to the Breadcrumb API endpoints and added a new type of Flock API key. This Pull Request adds these new details and tweaks the advice given for breadcrumbs to make use of the new features.

Types of changes

  • Bugfix (non-breaking change which fixes an issue)
  • New feature (non-breaking change which adds functionality)
  • Breaking change (fix or feature that would cause existing functionality to not work as expected)
  • [ x ] Documentation Update

Checklist

  • [ x ] Lint and unit tests pass locally with my changes (if applicable)
  • [ x ] I have run pre-commit (pre-commit in the repo)
  • [ x ] I have added tests that prove my fix is effective or that my feature works
  • [ x ] I have added necessary documentation (if appropriate)

:::

### Breadcrumb Credentials
Certain Breadcrumbs generate and store valid credentials that act as an identifier for the Breadcrumb and make them more appealing to attackers. When creating these Breadcrumbs you must provide a reminder, which we will alert you with if the credentials are used in an attack on any of your Canaries.
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Suggested change
Certain Breadcrumbs generate and store valid credentials that act as an identifier for the Breadcrumb and make them more appealing to attackers. When creating these Breadcrumbs you must provide a reminder, which we will alert you with if the credentials are used in an attack on any of your Canaries.
Certain Breadcrumbs generate and store valid credentials that act as an identifier for the Breadcrumb and make them more appealing to attackers. When creating these Breadcrumbs you must provide a reminder, which will be included in an alert if the credentials are used in an attack on any of your Canaries.


As these Breadcrumb kinds produce static credentials, you can generate them without supplying a `node_id` to create a set of valid credentials which will still alert on use without creating configuration files referencing a specific Canary.

These Breadcrumbs are currently excluded from the archive produced by Downloading without a specified kind.
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

just checking if Downloading was meant to be downloading

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants