InsightIDR

Velociraptor Event Sources All about InsightIDR event source management and configuration. API All about the InsightIDR API. Check out the InsightIDR API docs for investigations and threats and log search. Log Search Everything related to searching and visualizing your InsightIDR logs. Alerts Topics related to managing and customizing InsightIDR alerts. Automation Discussions on InsightIDR automation and automation workflows used to extend and integrate the product.

Topic	Replies	Views	Activity
About the InsightIDR category InsightIDR	0	792	June 5, 2020
Test Payload for NIDS InsightIDR InsightIDR	2	130	August 31, 2026
Suspicious Process - Shim Install Bombing InsightIDR	9	1373	August 31, 2026
Can User Risk Ranking and Notable Behaviors be queried or used for alerts? Alerts InsightIDR	1	123	August 27, 2026
Keyless Integration or Securing API keys Automation google_directory	0	92	August 27, 2026
Trend Vision One: "Observed Attack Techniques" missing in API logs ingestion method Event Sources InsightIDR	1	212	August 13, 2026
False positives? Suspicious Process - Potential AppVLP Proxy Execution InsightIDR	7	726	August 13, 2026
Rapid7 and Cloudflare Event Sources InsightIDR	2	335	August 6, 2026
Honeypot and network collectors like Solarwinds or Auvik InsightIDR	1	207	July 30, 2026
Custom Event sources Event Sources	1	187	July 21, 2026
User Last Login? InsightIDR	1	177	July 21, 2026
Sophos Central Event Source Event Sources	1	195	July 21, 2026
SharePoint ransomware \ bad actor detection rules InsightIDR	0	121	July 16, 2026
Pagination problem when export IDR Detection Rules API	1	148	July 16, 2026
Investigation Count Dashboard InsightIDR dashboards	9	1295	July 6, 2026
Priority in Audit Logs InsightIDR	1	139	June 29, 2026
Honeypot on KVM hypervisor InsightIDR	0	148	June 24, 2026
Approve/deny by email from someone who isn't an InsightConnect user — Human Decision alternative, and is one workflow possible? Automation workflow-building , workflows	0	126	June 23, 2026
Anyone else seeing AV detections against Insight Agent token_handler.exe (v4.1.1.55)? InsightIDR	10	589	June 18, 2026
Trying to set up alerts on large file uploads to the Internet Alerts	5	260	June 17, 2026
Ir_agent.exe/token_handler.exe as Mal/Generic-S on Sophos AV InsightIDR InsightIDR	3	201	June 16, 2026
Is InsightIDR starting to feel a bit behind the curve? InsightIDR	2	481	June 15, 2026
Way to see matching log entry for investigations and alerts through email Alerts	1	188	June 12, 2026
InsightIDR to ServiceNOW Connection Not Working InsightIDR	1	162	June 12, 2026
RAPID7 NIDS TIDE Signatures InsightIDR	1	168	June 2, 2026
Anyone get bumped from LEEF to CEF for log formatting on Checkpoint firewalls? InsightIDR	0	109	May 29, 2026
Entra ID / Azure AD log schema InsightIDR InsightIDR	10	297	May 27, 2026
Snowflake - No IDR EventSource? Event Sources InsightIDR	0	141	May 22, 2026
CVE-2026-31431 (“CopyFail”) Detection InsightIDR	1	690	May 11, 2026
Wi-Fi Credentials Harvesting Using Netsh Alerts	2	343	May 1, 2026