InsightIDR

Velociraptor Event Sources All about InsightIDR event source management and configuration. API All about the InsightIDR API. Check out the InsightIDR API docs for investigations and threats and log search. Log Search Everything related to searching and visualizing your InsightIDR logs. Automation Discussions on InsightIDR automation and automation workflows used to extend and integrate the product. Alerts Topics related to managing and customizing InsightIDR alerts.

Topic	Replies	Views	Activity
About the InsightIDR category InsightIDR	0	795	June 5, 2020
Citrix updates causing IDR events InsightIDR	2	94	September 24, 2026
Trend Vision One: "Observed Attack Techniques" missing in API logs ingestion method Event Sources InsightIDR	2	317	September 9, 2026
CrowdStrike Falcon event source issues Event Sources InsightIDR , crowdstrike_falcon	0	107	September 8, 2026
Test Payload for NIDS InsightIDR InsightIDR	2	200	August 31, 2026
Suspicious Process - Shim Install Bombing InsightIDR	9	1746	August 31, 2026
Can User Risk Ranking and Notable Behaviors be queried or used for alerts? Alerts InsightIDR	1	176	August 27, 2026
Keyless Integration or Securing API keys Automation google_directory	0	114	August 27, 2026
False positives? Suspicious Process - Potential AppVLP Proxy Execution InsightIDR	7	792	August 13, 2026
Rapid7 and Cloudflare Event Sources InsightIDR	2	354	August 6, 2026
Honeypot and network collectors like Solarwinds or Auvik InsightIDR	1	213	July 30, 2026
Custom Event sources Event Sources	1	200	July 21, 2026
User Last Login? InsightIDR	1	187	July 21, 2026
Sophos Central Event Source Event Sources	1	210	July 21, 2026
SharePoint ransomware \ bad actor detection rules InsightIDR	0	126	July 16, 2026
Pagination problem when export IDR Detection Rules API	1	159	July 16, 2026
Investigation Count Dashboard InsightIDR dashboards	9	1311	July 6, 2026
Priority in Audit Logs InsightIDR	1	148	June 29, 2026
Honeypot on KVM hypervisor InsightIDR	0	159	June 24, 2026
Approve/deny by email from someone who isn't an InsightConnect user — Human Decision alternative, and is one workflow possible? Automation workflow-building , workflows	0	134	June 23, 2026
Anyone else seeing AV detections against Insight Agent token_handler.exe (v4.1.1.55)? InsightIDR	10	635	June 18, 2026
Trying to set up alerts on large file uploads to the Internet Alerts	5	286	June 17, 2026
Ir_agent.exe/token_handler.exe as Mal/Generic-S on Sophos AV InsightIDR InsightIDR	3	213	June 16, 2026
Is InsightIDR starting to feel a bit behind the curve? InsightIDR	2	504	June 15, 2026
Way to see matching log entry for investigations and alerts through email Alerts	1	203	June 12, 2026
InsightIDR to ServiceNOW Connection Not Working InsightIDR	1	168	June 12, 2026
RAPID7 NIDS TIDE Signatures InsightIDR	1	182	June 2, 2026
Anyone get bumped from LEEF to CEF for log formatting on Checkpoint firewalls? InsightIDR	0	114	May 29, 2026
Entra ID / Azure AD log schema InsightIDR InsightIDR	10	338	May 27, 2026
Snowflake - No IDR EventSource? Event Sources InsightIDR	0	151	May 22, 2026