Views:

The Managed Detection and Response screen allows you to deploy Managed Detection and Response settings and investigation tasks to specified targets from the Apex Central console.

Tip:

Use the Managed Detection and Response screen to perform the following tasks.

Task

Description

Register to the Threat Investigation Center server

Click the Settings tab to register Apex Central to the Threat Investigation Center server.

Apex Central integrates with Trend Micro Threat Investigation Center to enable Managed Detection and Response capabilities.

For more information, see Registering Apex Central to the Threat Investigation Center.

Unregister from the Threat Investigation Center server

Click the Settings tab to unregister Apex Central to the Threat Investigation Center server.

For more information, see Unregistering from the Threat Investigation Center Server.

Suspend or resume the Managed Detection and Response Service

Click the Settings tab to suspend or resume the Managed Detection and Response Service.

Important:

Suspending the Managed Detection and Response Service stops the receipt of new investigation tasks and the sending of logs to the Threat Investigation Center server. Apex Central does not cancel any ongoing tasks and the results are still sent to the Threat Investigation Center server.

For more information, see Suspending or Resuming the Managed Detection and Response Service.

Approve or reject new investigation tasks

Click the Pending Tasks tab to approve or reject new investigation tasks.

For more information, see Approving or Rejecting Investigation Tasks.

Track deployed investigation tasks

Click the Task Tracking tab to track and view approved or rejected investigation tasks and commands.

For more information, see Tracking Investigation Tasks.

View automated analyses

Click the Automated Analyses tab to view information about the log data that Trend Micro collects to further protect your network.

For more information, see Viewing Automated Analyses.