InsightIDR | Shared Account Detection

We need to check with the team to find out when the card was removed from the library.

For now, if you want to present shared account data in a dashboard you should be able to do so with this query:

where(source_account!==destination_account) groupby(destination_account) calculate(unique:source_account) sort(DESC)