Trend Micro Vision One

Trend Micro Vision One provides comprehensive detection and response capabilities across emails, endpoints, servers, cloud workloads, and networks, all through a single platform or via the managed Trend Micro Vision One service. The integration enables monitoring of alerts, audits, and detection activities.

Integration Method: API

Tables: Incident finding

Trend Micro Vision One Configuration

An API key needs to be set up in the Trend Micro Vision platform.

1. Sign in to the Trend Vision One Dashboard. 

2. Click on the left bottom arrow to open the side bar. 

3. In the side bar menu, scroll down and click on the Administration option. 

4. In the Administration dropdown, click on API Keys. 

5. Click on Add API Key. 

6. Fill in the details which are required for generating the API key.

   1. Select Master Administrator in the Role option.

   2. Make sure that the Status is ON.

   3. Click on Add at the bottom of the side window.

7. You can view the API key and URL highlighted in the red boxes. Save this key for later DataBee configuration 

8. The Website URL helps identify the data region associated with the user, which is required for API ingestion in the DataBee UI.

   1. You can determine the Trend Vision One site (location/region) based on the Trend Vision One portal URL. Refer to the following docs.

   2. You can determine your base URL as per your site found above for DataBee Input in this API documentation.

The Table below shows the Trend Micro portal URL and base URL for DataBee as per Nov, 2024. This may be subject to change as per API specifications.

DataBee Configuration

1. Login to the DataBee console and navigate to Data > Data Source and click the Add New Data Source button.

2. Search for Trend Micro Vision One, and click it 

3. Click on the API Ingest Option. 

4. Add the details about Data Source Name, Owner Name and Owner E-mail and click on Next.

5. In the configuration details, enter the following:

   • Authorization Method: Bearer Token

   • Token: Paste the API token generated earlier

   • API URL: Replace the <placeholder> as per the data region found the Trend Micro Portal URL.

6. Click Submit