Can I use Rapid7 Insight Agent with Red Canary CWP?

The Rapid7 Insight Agent collects telemetry data from the Linux operating system and requires the auditd service to be present but disabled. Since the Red Canary CWP agent consumes data from auditd, this leads to challenges for running both simultaneously.

To bridge the gap, Rapid7 provides a guide for enabling Insight Agent compatibility mode with Linux assets requiring auditd to be enabled. However, this workaround is not supported with Red Canary CWP at this time and is not a recommended solution owing to concerns around stability and degraded functionality.