InsightIDR

Velociraptor Event Sources All about InsightIDR event source management and configuration. API All about the InsightIDR API. Check out the InsightIDR API docs for investigations and threats and log search. Alerts Topics related to managing and customizing InsightIDR alerts. Log Search Everything related to searching and visualizing your InsightIDR logs. Automation Discussions on InsightIDR automation and automation workflows used to extend and integrate the product.

Topic	Replies	Views	Activity
About the InsightIDR category InsightIDR	0	788	June 5, 2020
Trend Vision One: "Observed Attack Techniques" missing in API logs ingestion method Event Sources InsightIDR	0	45	August 2, 2026
Honeypot and network collectors like Solarwinds or Auvik InsightIDR	1	78	July 30, 2026
Custom Event sources Event Sources	1	116	July 21, 2026
User Last Login? InsightIDR	1	127	July 21, 2026
Sophos Central Event Source Event Sources	1	159	July 21, 2026
SharePoint ransomware \ bad actor detection rules InsightIDR	0	94	July 16, 2026
Pagination problem when export IDR Detection Rules API	1	123	July 16, 2026
Investigation Count Dashboard InsightIDR dashboards	9	1276	July 6, 2026
False positives? Suspicious Process - Potential AppVLP Proxy Execution InsightIDR	6	455	July 3, 2026
Priority in Audit Logs InsightIDR	1	127	June 29, 2026
Honeypot on KVM hypervisor InsightIDR	0	140	June 24, 2026
Approve/deny by email from someone who isn't an InsightConnect user — Human Decision alternative, and is one workflow possible? Automation workflow-building , workflows	0	112	June 23, 2026
Anyone else seeing AV detections against Insight Agent token_handler.exe (v4.1.1.55)? InsightIDR	10	541	June 18, 2026
Trying to set up alerts on large file uploads to the Internet Alerts	5	241	June 17, 2026
Ir_agent.exe/token_handler.exe as Mal/Generic-S on Sophos AV InsightIDR InsightIDR	3	188	June 16, 2026
Is InsightIDR starting to feel a bit behind the curve? InsightIDR	2	452	June 15, 2026
Way to see matching log entry for investigations and alerts through email Alerts	1	175	June 12, 2026
InsightIDR to ServiceNOW Connection Not Working InsightIDR	1	153	June 12, 2026
RAPID7 NIDS TIDE Signatures InsightIDR	1	155	June 2, 2026
Anyone get bumped from LEEF to CEF for log formatting on Checkpoint firewalls? InsightIDR	0	103	May 29, 2026
Entra ID / Azure AD log schema InsightIDR InsightIDR	10	278	May 27, 2026
Snowflake - No IDR EventSource? Event Sources InsightIDR	0	128	May 22, 2026
CVE-2026-31431 (“CopyFail”) Detection InsightIDR	1	675	May 11, 2026
Wi-Fi Credentials Harvesting Using Netsh Alerts	2	317	May 1, 2026
FP: "Retrieval of Obfuscated PowerShell Cmdlet Name via Windows Globbing Pattern" triggered by Claude Code's shell-discovery probe Alerts InsightIDR	0	203	April 28, 2026
Auditd Compatibility Mode InsightIDR	9	824	April 17, 2026
NIDS Network Scan Detection InsightIDR	0	93	April 16, 2026
API Usage in Log Search InsightIDR	3	157	April 10, 2026
Log collectors, authentication on windows evironments InsightIDR	11	760	April 8, 2026