Actions for Trend Micro Vision One #
- Send Data to Trend Micro Vision One. Sends a custom set of Lucidum data to Trend Micro Vision One.
Use Cases #
Below are the possible use cases for these actions:
-
If you want to run Lucidum “headless”, you can send relevant data to Trend Micro Vision One on a regular schedule.
- You can send normalized, enriched Lucidum data to Trend Micro Vision One to be indexed, searched, and analyzed.
Prerequisites #
To execute Trend Micro Vision One actions, you must configure a Trend Micro Vision One API connection beforehand. The required parameters are described in the instructions for creating a Trend Micro Vision One connector in Lucidum https://lucidum.io/docs/trend-micro-vision-one/.
NOTE. The specified account should have read and write permissions.
Workflows #
- Creating a new Configuration and a new Action
- Cloning an Existing Action
- Creating a new Action from the Location Results page
- Editing a Configuration
- Editing an Action
- Viewing Information about an Action
Trend Micro Vision One Configuration #
To create a configuration for Trend Micro Vision One actions:
-
Configuration Name. Identifier for the Configuration. This name will appear in the Lucidum Action Center.
-
Host. The hostname or domain of the Trend Micro Vision One APIs. For example, api.xdr.trendmicro.com.
-
API Token. API token for an account with read and write access to the Trend Micro Vision One APIs. For details on generating an API token, see https://automation.trendmicro.com/xdr/Guides/First-steps-toward-using-the-APIs/#GUID-FF6948F5-A7D9-4D80-9BA3-B9C068F54097. For details on permissions, see https://automation.trendmicro.com/xdr/Guides/Authentication/.
-
Max # of Records per Payload. The maximum number of records to send to Trend Micro Vision One in each action. The default value is “50”.
Manage Action Token #
To describe an action token for Trend Micro Vision One actions:
-
Click the token icon.
-
In the Manage Action Tokens page, click the plus-sign in the upper right.
Create a New Action #
To create an action for Trend Micro Vision One, contact Lucidum customer care.
