Incident View
Trend Micro Vision One creates incidents to group related alerts using advanced alert correlation and machine learning techniques.
|
Data |
Description |
|---|---|
|
Score |
The score that Trend Micro Vision One assigns to the incident based on the aggregate scores from related alerts |
|
Incident ID |
A unique identifier for the incident Click an incident ID to view detailed information. For more information, see Incident Details. |
|
Description |
The description of the incident |
|
Last updated |
The date and time Trend Micro last updated the incident and the last update status
|
|
Associated alerts |
The total number of related alerts and the number of active alerts associated with the incident Click the number to view the workbench ID for each associated alert. Click a workbench ID to view workbench details. Note:
|
|
Impact scope |
The number of entities that the incident affects within the company network |
|
Created |
The date and time Trend Micro Vision One generated the incident |
- Incident Details
You can view detailed incident data on each tab to further investigate and mitigate a potential security breach in your network environment. - Alerts Tab
The Alerts tab displays the list of alerts associated with an incident. - Incident-based Execution Profile
The Incident-based Execution Profile allows you to focus on objects and events across affected endpoints from a broader perspective (incident view), rather than isolated, discrete alerts that may point to the same underlying root cause.
