Views:

Follow this guide to ensure that you have the basic set up in place to be able to use custom rules.

  1. Please see the First steps toward using the APIs and on making requests to the Vision One public APIs.
  2. Create an API key if you haven’t already
  3. Download Postman (or equivalent program) to manage API requests - Download Postman | Get Started for Free - this is highly recommended to easily test, format and troubleshoot issues with your custom rules.
  4. In Postman, Create a new workspace called Custom Rules Demo > Click on the drop-down> Select Add a request to add your first request in Postman. Name the request ‘List accounts’ - we will use this List Accounts request to confirm that the basic set-up is working and returning a valid response.
    1. Please see the List Accounts API reference for details on how to build the request.
  5. In your postman query, save the accounts endpoint URL depending on your region e.g. https://api.xdr.trendmicro.com/beta/cloudPosture/accounts and click Send. If the request is configured correctly, you should receive a response with data about the cloud accounts in your company.
  6. In your Postman workspace, click on the ellipsis (3 dots) and duplicate your successful query (most of the configuration can be re-used).
  7. Rename the new query ‘Get company custom rules’, and change the URL to /customRules, e.g. https://api.xdr.trendmicro.com/beta/cloudPosture/customRules, click save and send. You should receive a successful but empty response - we have not yet saved any custom rules.
  8. You should now have the basic Postman/API set up complete and tested.
    You are ready to dive deeper into using custom rules.