IDN2QRadar - Open Source Tool

Check out IDN2QRadar, an open source, MIT licensed project to send audit logs from SailPoint IDN to QRadar using AWS services.

The goal of the project is to send SailPoint IdentityNow (IDN) Event logs to QRadar SIEM. Once the events are in QRadar, rules can be built that trigger offenses if undesired behavior is observed. The author(s) of this repo saw that there is no official integration between IDN and QRadar, so they dove into the IDN APIs to build their own solution. Really great work from our community!

4 Likes