Connect your own Trend Micro Vision One XDR tenant to manage Workbench alerts, Endpoint Security (isolate/restore, scan), Suspicious Object Lists (IOCs), Observed Attack Techniques, and XDR data la...
What this app can do
16 tools registered
Connect Trend MicroFree
Connect your own Trend Micro Vision One tenant (data-center region + Authentication Token), verifying the credentials with a real call before saving.
List ConnectionsFree
List the connected Trend Micro Vision One tenants.
Disconnect Trend MicroFree
Disconnect a Trend Micro Vision One tenant: deletes the saved Authentication Token. Nothing in Vision One itself is changed.
List Workbench Alerts8 tok
List Trend Micro Vision One Workbench alerts on the connected tenant, optionally filtered by status.
Get Workbench Alert8 tok
Read one Trend Micro Vision One Workbench alert in full.
Update Workbench Alert16 tok
Update a Trend Micro Vision One Workbench alert's status and/or investigation result.
List Endpoints8 tok
List endpoints enrolled in the connected Trend Micro Vision One tenant.
Isolate Endpoint16 tok
Isolate a Trend Micro Vision One endpoint from the network. The endpoint stays protected but loses almost all network access -- confirm the target host before running.
Restore Endpoint16 tok
Restore network connection for a previously isolated Trend Micro Vision One endpoint.
Scan Endpoint20 tok
Trigger an on-demand malware scan on a Trend Micro Vision One endpoint.
List Suspicious Objects8 tok
List Suspicious Objects (fleet-wide indicators) configured on the connected Trend Micro Vision One tenant.
Create Suspicious Object16 tok
Add a Suspicious Object (hash, IP, domain, or URL) to the connected Trend Micro Vision One tenant. scan_action defaults to 'log' (monitor only) -- pass 'block' explicitly to actively deny it fleet-wide.
Remove Suspicious Object16 tok
Permanently remove a Suspicious Object from the connected Trend Micro Vision One tenant. Cannot be undone.
List Attack Techniques8 tok
List ATT&CK-mapped Observed Attack Techniques detected on the connected Trend Micro Vision One tenant.
Run Search Query20 tok
Run a Search query (Vision One's XDR data lake query engine) against the connected tenant's telemetry within a bounded time window.
Audit Trend Micro Tenant40 tok
Build one aggregated health report across the connected Trend Micro Vision One tenant: open Workbench alerts by severity, isolated endpoints, and active-block Suspicious Objects.