Trend Micro Apex One

OverviewResources

Once Apex One is configured to deliver events to EventTracker Manager; alerts, dashboards, and reports can be configured into EventTracker.

Security

Alerts

Trend Micro Apex: A potential threat could not be quarantined – This alert is triggered when Trend Micro Apex One fails to quarantine a potential threat.
Trend Micro Apex: A potential threat has been quarantined - This alert is triggered when Trend Micro Apex One quarantines a potential threat.

Reports

Trend Micro Apex - Command and Control Activities - C&C servers are used by cybercriminals to send commands to systems compromised by malware and receive stolen information from the target network. This report contains information such as, action type, risk level, detection source, requested URL, etc.
Trend Micro Apex - Attack Discovery Detections Activities - Attack Discovery uses Trend Micro threat intelligence based on Indicators of Attack (IoA) behaviors. After detecting a known IoA, attack discovery logs the detection. This report contains information such as, rule ID, risk level, category ID, attack discovery object information, pattern number, etc.
Trend Micro Apex - Endpoint Application Control Activities - Endpoint Application Control allows user to enhance their defenses against malware and targeted attacks by preventing unknown and unwanted applications from executing on a corporate endpoint.
Trend Micro Apex - Network Content Inspection Activities - Network Content Inspection depends on two components, Global C&C IP list and relevance rule pattern to detect any network content violations on a network.
Trend Micro Apex - Behavior Monitoring Activities - Behavior Monitoring detects malicious scripts executed by legitimate windows programs and the true payload path of script files executed by legitimate DLLs to protect endpoints against malware hidden in file-less attack vectors.
Trend Micro Apex - Web Security Activities - Provides information on events such as threat protection on web threats, URL filtering and application control, etc.

Operations

Reports

Trend Micro Apex - User login and logout activities - Logon/Logoff activities logged by Trend Micro Apex One Central every time a managed user tries to log in or log out.

Scope

The configuration details are consistent with EventTracker version 9.2 and later, and Trend Micro Apex One (On-Premises).

Documentation:

To configure Trend Micro Apex One to send logs to EventTracker, refer to the How-to Guide.

For more information please refer to the Trend Micro Apex One Integration guide