Forensics | TrendAI™

Views:

Respond to security incidents, conduct compromise assessments, threat hunting, and monitoring directly within TrendAI Vision One™.

Forensics lets you conduct security investigations without the need for separate digital forensics and incident response (DFIR) tools. Forensics has no deployment steps and adds no operational complexity.

From the TrendAI Vision One™ console, you can gather digital evidence from endpoints, organize the collected evidence data within workspaces, and triage endpoints using osquery and YARA.

The following table outlines the sections available in Forensics (Agentic SIEM & XDR → Forensics).

Section	Description
War room	Create, modify, or delete workspaces to organize the collected evidence and conduct incident investigations.
Evidence archive	Collect and manage digital evidence from the endpoints in your environment.
Task list	Monitor the status of Forensics-generated tasks, such as evidence collection.