Trend Micro Vision One Integration

Wider attack surface coverage powered by hundreds of integrations and deeper threat visibility powered by thousands of detections.

Trend Micro Vision One

Version: Trend Micro Vision One

Trend Micro Vision One XDR (extended detection and response) collects and automatically correlates data across multiple security layers - email, endpoint, server, cloud workload, and network. This allows for faster detection of threats and improved investigation and response times through security analysis.

Netsurion's Open XDR platform facilitates monitoring events retrieved from Trend Micro Vision One. Its dashboard, category, alerts, and reports benefit in detecting vulnerabilities, malware attacks, phishing email attacks, lateral movements, and others.

Firstly, it is necessary to set up Trend Micro Vision One to deliver events to the Netsurion Open XDR Platform and then configure the dashboards and reports into the Netsurion Open XDR Platform.

Alerts

Type	Name	Description
Security	Trend Micro Vision One - Critical activity detected	This critical activity alert is triggered when the severity of the log is 7,8,9, and 10.
Security	Trend Micro Vision One: Critical workbench activity detected	This critical workbench activity alert is triggered when the severity of the log is 7,8,9, and 10.

Reports

Type	Name	Description
Security	Trend Micro Vision One - Workbench alert detail	This report provides a detailed summary of the workbench alert activities in Trend Micro Vision One. The report includes the category, severity, requested URL, affected devices, affected accounts, MITRE IDs, and more.
Security	Trend Micro Vision One - Observed attack technique details	This report provides a detailed summary of the individual activities in Trend Micro Vision One. The report includes the device hostname, device IP address, MITRE IDs, threat category, severity, and more.

Documentation

The configuration details in this guide are consistent with the Netsurion Open XDR platform version 9.3 or later and Trend Micro Vision One.

Download Integration Guide and How-To guide for more information and to configuration instructions.