Reviewing Detection Models

Use the Detection Model Management app to control the types of alerts that Trend Micro Vision One triggers and sends to the Workbench.

By default, Trend Micro Vision One enables alerts for all detection models that your applicable products support. As you add more supported products to your environment, Trend Micro Vision One automatically enables the newly-supported alert triggers.

  1. Go to Detection Model Management.
  2. Review the currently enabled models or use the filters to locate specific models.
    • Severity: Depending on the type of event and MITRE information, the level assigned to the model changes

    • Applicable products: Each model requires specific data from supported products

      Note:

      You cannot enable an alert trigger if your environment does not have the required products connected.

    • Status: Whether Trend Micro Vision One triggers alerts for the model