Get started with Agentless Vulnerability & Threat Detection

To start scanning for vulnerabilities and malware in your cloud resources, add your AWS account to Trend Vision One in Cloud Accounts using the CloudFormation template. Enable Agentless Vulnerability & Threat Detection, and then click Scanner Settings to choose the resource types to scan and whether to scan for vulnerabilities, malware, or both. Vulnerability scanning is enabled by default. You can change the scanning configuration at any time. For detailed instructions, see Adding an AWS account using CloudFormation.

Agentless Vulnerability & Threat Detection scans the following AWS resource types:

Agentless Vulnerability & Threat Detection scans once per day, starting when you first deploy the CloudFormation template. Anti-malware scans begin at the next daily scan after you enable the feature. Scan times are not configurable after deployment.

Scan results are sent to Trend Vision One when the scan is complete and can be seen in Cloud Posture, Executive Dashboard, Operations Dashboard, and asset profile screens in Attack Surface Discovery. After you patch vulnerabilities or remediate malware in EBS volumes, Lambda functions, or Lambda layers, the detections no longer appear after the next daily scan. Vulnerability detections in ECR images remain in Operations Dashboard → Vulnerabilities for seven days after patching. Malware detections in ECR images remain in Operations Dashboard → All Risk Events for seven days after remediation.