})
+
+We're excited to introduce the new Code42 Incydr app for Sumo Logic. This app leverages the Sumo Logic Cloud-to-Cloud Code42 Incydr source that collects audits, file events, and user sessions data from the Code42 Incydr platform. This app helps security analysts monitor, detect, and respond to potential data threats across an organization. [Learn more](/docs/integrations/saas-cloud/code42-incydr/).
\ No newline at end of file
diff --git a/cid-redirects.json b/cid-redirects.json
index 4031331d25..50931975cf 100644
--- a/cid-redirects.json
+++ b/cid-redirects.json
@@ -1842,6 +1842,7 @@
"/cid/21222": "/docs/integrations/saas-cloud/microsoft-exchange-trace-logs",
"/cid/1961": "/docs/integrations/amazon-aws/elasticache",
"/cid/1962": "/docs/integrations/saas-cloud/cloudflare",
+ "/cid/1995": "/docs/integrations/saas-cloud/code42-incydr",
"/cid/1963": "/docs/integrations/sumo-apps/enterprise-audit",
"/cid/1964": "/docs/integrations/security-threat-detection/f5-big-ip-ltm",
"/cid/1965": "/docs/integrations/security-threat-detection/netskope",
diff --git a/docs/integrations/product-list/product-list-a-l.md b/docs/integrations/product-list/product-list-a-l.md
index 1b0329ee22..465812ed04 100644
--- a/docs/integrations/product-list/product-list-a-l.md
+++ b/docs/integrations/product-list/product-list-a-l.md
@@ -159,7 +159,7 @@ For descriptions of the different types of integrations Sumo Logic offers, see [
| }){kind=logo}
| [Citrix](https://www.citrix.com/) | App: [Citrix Cloud](/docs/integrations/saas-cloud/citrix-cloud/) })
| [Claroty](https://claroty.com/) | Automation integration: [Claroty](/docs/platform-services/automation-service/app-central/integrations/claroty/) })
| [Cloudflare](https://www.cloudflare.com/) | App: [Cloudflare](/docs/integrations/saas-cloud/cloudflare/) }){kind=logo}
| [Code42](https://www.code42.com) | Cloud SIEM integration: [Code42](https://github.com/SumoLogic/cloud-siem-content-catalog/blob/master/vendors/f764fde6-a435-42cb-9407-15734a99d657.md) | [Code42](https://www.code42.com) | App: [Code42 Incydr](/docs/integrations/saas-cloud/code42-incydr/) })
| [Cofense](https://cofense.com/) | Automation integration: [Cofense](/docs/platform-services/automation-service/app-central/integrations/cofense/) |
| }){kind=logo}
| [ConfitCat](https://configcat.com/) | Webhook: [ConfitCat](/docs/integrations/webhooks/configcat/) |
| })
| [ConnectWise PSA](https://info.connectwise.com/professional-services-automation/manage/demo/sem/demo) | Automation integration: [ConnectWise Manage](/docs/platform-services/automation-service/app-central/integrations/connectwise-manage/) |
diff --git a/docs/integrations/saas-cloud/code42-incydr.md b/docs/integrations/saas-cloud/code42-incydr.md
new file mode 100644
index 0000000000..51a1734d53
--- /dev/null
+++ b/docs/integrations/saas-cloud/code42-incydr.md
@@ -0,0 +1,489 @@
+---
+id: code42-incydr
+title: Code42 Incydr
+sidebar_label: Code42 Incydr
+description: The Sumo Logic app for Code42 Incydr allows security teams to monitor, detect, and respond to potential data threats throughout an organization. It features insightful dashboards by gathering audit logs, file events, and user session data.
+---
+
+import useBaseUrl from '@docusaurus/useBaseUrl';
+
+
+
+The Sumo Logic app for Code42 Incydr assists security teams in monitoring, detecting, and responding to data threats within an organization. It features dashboards that track audits, file events, and user sessions. By identifying risky file activities and monitoring user behavior, the app helps prevent data leaks and intellectual property theft. Incydr also provides a comprehensive analysis of user actions, risk patterns, and geolocation, equipping security professionals with the information necessary to safeguard against insider threats and ensure compliance with data security standards.
+
+:::info
+This app includes [built-in monitors](#code42-incydr-monitors). For details on creating custom monitors, refer to the [Create monitors for Code42 Incydr app](#create-monitors-for-code42-incydr-app).
+:::
+
+## Log types
+
+This app uses Sumo Logic’s [Code42 Incydr Source](/docs/send-data/hosted-collectors/cloud-to-cloud-integration-framework/code42-incydr-source/) to collect audits, file events, and session logs from the Code42 Incydr platform.
+
+### Sample log messages
+
+})
+
+### File Events
+
+The **Code42 Incydr - File Events** dashboard is a security command center that tracks all file events within your organization, providing detailed metrics on total and severe events, as well as specific user and file activities, enabling identification of potential data breaches and insider threats. The dashboard displays the sources of file events, including OS-specific insights, and highlights geographic risk, particularly from embargoed areas. With real-time data and detection of anomalies in file behavior, security teams can efficiently monitor, analyze, and respond to dynamic data movement and access.
+
+})
+
+### Sessions
+
+The **Code42 Incydr - Sessions** dashboard offers a real-time view of your organization's session data and associated risk levels, with analytics on total sessions, average engagement, and a spectrum of risk events ranging from low to critical. Dynamic visualizations display session trends, geospatial engagement, and content inspections, helping security teams quickly identify and address potential data exfiltration risks. This dashboard is essential for continuous monitoring and ensuring prompt action on any anomalies or compliance issues to maintain strong data security protocols.
+
+})
+
+## Create monitors for Code42 Incydr app
+
+import CreateMonitors from '../../reuse/apps/create-monitors.md';
+
+Analyze logs, events, and trends from your websites and apps on the Cloudflare network.
+Monitor, detect, and respond to potential data threats on your Code42 Incydr platform.
+})