Rapid7 IDR (SIEM) integration

[grcjagoff]

I'm wondering if anyone using JC also uses rapid7 IDR for their SIEM and has any info on how to leverage the JC API to ingest logs into rapid7.  Any help would be much appreciated!

[rparker48]

I have the same question. I'd rather use the API rather than the serverless app. Did you ever find a solution?

[grcjagoff]

Unfortunately no…was going to try and dive into the serverless code and see if I could figure out a way to do it but i haven’t had time yet.