InsightIDR

Velociraptor Event Sources All about InsightIDR event source management and configuration. API All about the InsightIDR API. Check out the InsightIDR API docs for investigations and threats and log search. Automation Discussions on InsightIDR automation and automation workflows used to extend and integrate the product. Alerts Topics related to managing and customizing InsightIDR alerts. Log Search Everything related to searching and visualizing your InsightIDR logs.

Topic	Replies	Views	Activity
About the InsightIDR category InsightIDR	0	769	June 5, 2020
Investigation Count Dashboard InsightIDR dashboards	9	1188	July 6, 2026
False positives? Suspicious Process - Potential AppVLP Proxy Execution InsightIDR	6	308	July 3, 2026
Priority in Audit Logs InsightIDR	1	79	June 29, 2026
Honeypot on KVM hypervisor InsightIDR	0	107	June 24, 2026
Approve/deny by email from someone who isn't an InsightConnect user — Human Decision alternative, and is one workflow possible? Automation workflow-building , workflows	0	81	June 23, 2026
Anyone else seeing AV detections against Insight Agent token_handler.exe (v4.1.1.55)? InsightIDR	10	451	June 18, 2026
Trying to set up alerts on large file uploads to the Internet Alerts	5	191	June 17, 2026
Ir_agent.exe/token_handler.exe as Mal/Generic-S on Sophos AV InsightIDR InsightIDR	3	154	June 16, 2026
Is InsightIDR starting to feel a bit behind the curve? InsightIDR	2	397	June 15, 2026
Way to see matching log entry for investigations and alerts through email Alerts	1	143	June 12, 2026
InsightIDR to ServiceNOW Connection Not Working InsightIDR	1	128	June 12, 2026
RAPID7 NIDS TIDE Signatures InsightIDR	1	126	June 2, 2026
Anyone get bumped from LEEF to CEF for log formatting on Checkpoint firewalls? InsightIDR	0	84	May 29, 2026
Entra ID / Azure AD log schema InsightIDR InsightIDR	10	243	May 27, 2026
Snowflake - No IDR EventSource? Event Sources InsightIDR	0	97	May 22, 2026
CVE-2026-31431 (“CopyFail”) Detection InsightIDR	1	651	May 11, 2026
Wi-Fi Credentials Harvesting Using Netsh Alerts	2	284	May 1, 2026
FP: "Retrieval of Obfuscated PowerShell Cmdlet Name via Windows Globbing Pattern" triggered by Claude Code's shell-discovery probe Alerts InsightIDR	0	152	April 28, 2026
Auditd Compatibility Mode InsightIDR	9	761	April 17, 2026
NIDS Network Scan Detection InsightIDR	0	76	April 16, 2026
API Usage in Log Search InsightIDR	3	138	April 10, 2026
Log collectors, authentication on windows evironments InsightIDR	11	721	April 8, 2026
Automated workflow triggers Automation InsightConnect , workflows	1	111	April 8, 2026
PocketSOC: Mobile Console for Rapid7 SIEM (InsightIDR) InsightIDR	3	333	April 6, 2026
Network Sensor VM on Nutanix InsightIDR	6	200	March 31, 2026
Can't password protect the agent? How is this a security product? InsightIDR	11	1742	March 31, 2026
Network Sensor IDS - RAPID7-TIDE Rule Test H InsightIDR InsightIDR	2	89	March 19, 2026
InsightIDR - Mobile site InsightIDR	47	2507	March 19, 2026
Any update on a mobile site that is actually functional? InsightIDR	6	332	March 19, 2026