Views:

The Response Management app allows you to take actions and track the actions you have taken on your environment using the TrendAI Vision One™ console.

The following table outlines the actions available on the Task List tab in Response Management (Workflow and Automation → Response Management).
Action
Description
Filter response data
Use Search to locate specific task data.
  • Task status: The current status of the command sent to the managing server
    The Task status indicates whether the managing server was able to successfully receive and execute the command. If the command target is a Security Agent, the Task status does not necessarily indicate whether the target Security Agent or object successfully executed the command.
  • Action: The command sent to the target
    For more information, see Response actions.
  • Target type: The type of target object
  • Created/Updated by: The user that created or last updated the task
  • Search: Provides partial matching for the Task ID and Target objects
View task details
View the table for the status of commands sent to targets.
For more information, see Response data.
Approve or reject tasks
Select and approve or reject tasks.
For more information, see Require approval for specified response actions.
Take additional action on a task
Depending on the command sent to a target, you may be able to perform secondary or follow-up actions. Select the task to view any additional actions.
For more information, see Response actions.
The following table outlines the actions available on the Response Scripts tab in Response Management (Workflow and Automation → Response Management).
Action
Description
Add custom scripts
Under Custom Scripts, click Add script to upload custom Bash or PowerShell script files.
For more information, see Run Remote Custom Script task.
Add osquery queries
Note
Note
This action requires multi-factor authentication.
Under osquery, click Add query to type a custom osquery. Clicking Validate query toidentify any syntax errors.
For more information, see Run osquery task.
Add YARA rules
Note
Note
This action requires multi-factor authentication.
Under YARA Rules, click Add YARA rules to upload a TXT file of custom YARA rules. Click Validate YARA rules to identify any syntax errors.
For more information, see Run YARA rules task.
Related information