About the Rapid7 InsightIDR Integration
Rapid7 InsightIDR is Rapid7’s cloud-native SIEM and extended detection and response (XDR) platform, combining behavioral analytics, user and entity behavior analytics (UEBA), endpoint visibility, and threat intelligence to help security teams detect and investigate threats faster. Part of Synqly’s SIEM Unified API, the Rapid7 InsightIDR integration enables security teams to route normalized security event data from Synqly-connected tools into InsightIDR’s detection and analytics engine through a standardized connector. Integrate with Rapid7 InsightIDR to centralize security telemetry from across your stack into InsightIDR, enriching its behavioral detection rules and investigation capabilities with additional data sources.
Integration Use Cases
Get Alert
Retrieves an alert by ID.
Get Evidence
Retrieves the evidence for an investigation.
Get Investigation
Retrieves an investigation by ID.
Patch Investigation
Updates an investigation by ID.
Query Alerts
Queries alerts from the SIEM configured with the token used for authentication.
Query Events
Queries events from the SIEM configured with the token used for authentication.
Query Investigations
Queries investigations
Query Log Providers
Queries available log providers in the source SIEM
