Anyone have experience about parser and detection rules request?

InsightIDR
1

Hi all

I am consider to provide MTC service to customer , Rapid7 is good choice
I want to know how easy/hard it is if we need new event source and detection rules ?

2

@msakolvaree can you elaborate on the request? Do you mean how easy is it to add a new event source? Which source are you referring to?

Secondly its quite easy to build your Own Custom Detection Rules, see here Custom Detection Rules | InsightIDR Documentation