Request List

Track and manage all the response action requests submitted by the Managed XDR operations team.

Managed XDR sends response action requests for your manual approval if you disable auto approval. You can choose either of the following ways to deal with the response action requests:

  • Approve or reject a request directly in the email notification without accessing the Trend Micro Vision One console

  • Get an overview of all requests and manage one or more requests on the Request List screen of the Managed XDR app

    Note:

    Managed XDR retains the response action requests for 60 days after submission.

The following table outlines the actions you can perform on the response action requests.

Action

Description

View request details

To expand response action details, click the right arrow icon () on the left of the Status field.

To further check each task in the Response Management app, click the Task ID link.

Filter requests

Use the Status or Action filter and type response target keywords in the search box.

Note:

Run Trend Micro Investigation Kit: This response action deploys and executes the Trend Micro Investigation Kit on target endpoints to collect endpoint information.

Approve or reject requests

Select one or multiple requests and click Approve or Reject.

Set approved requests to expire

Note:

This operation is available only to the Remote Shell action requests.

A Remote Shell action request is assigned with a validity period after being approved. You can set the request to expire before the assigned end time.

Select one or multiple approved requests and click Set to Expire.

After being set to expire, the selected request is marked with "Expired" in the Status column. A new request must be submitted to start another remote shell session.