Views:

Configure the integration to allow D3 Security to retrieve security events from TrendAI Vision One™, enrich Workbench alerts, and automate response actions.

Procedure

  1. In the TrendAI Vision One™ console, obtain the endpoint URL and authentication token.
    1. Go to Workflow and Automation → Third-Party Integrations.
    2. Locate and click the D3 Security card.
    3. Click dddna_summary_detection_copy=GUID-4DE35BE5-57A5-4919-BF9C-5EC95F9CA8FD=1=en-us=Low.png to copy the Endpoint URL.
    4. Click Generate and copy the Authentication token.
  2. Configure the integration on the D3 Security platform.
    For more information, see the integration demo video or D3 Security documentation.
    1. Sign in to the D3 Security console.
    2. Go to the Configuration tab.
    3. Search for and select the Trend Micro Vision One integration.
    4. Click + Connection
      The New Connection window appears.
    5. Specify a name, site, and recipient site for the connection.
    6. (Optional) Specify an agent name and description for the connection.
    7. Select the Active checkbox.
    8. Paste the endpoint URL and authentication token obtained from the TrendAI Vision One™ console into the Server URL (domain level) and Authentication Token fields, respectively.
    9. Specify an API Version, or accept the default of v2.0.
    10. (Optional) Select the Connection Health Check checkbox and configure the related settings to schedule a health check.
    11. (Optional) Select a password vault connection to enable using your password vault.
    12. Click Test Connection to verify the integration settings.
      If the connect test succeeds, the Test Connection Passed alert window appears.
    13. Click + Add.
      D3 Security begins collecting security event data from TrendAI Vision One™. D3 Security can only access data generated after connecting to TrendAI Vision One™. You might need to allow some time before new data or actions start to appear.