Online Help Center Home
Privacy and Personal Data Collection Disclosure
- Pre-release Disclaimer
- Pre-release Sub-feature Disclaimer
Trend Vision One Data Privacy, Security, and Compliance
What's New
- September 2023
- August 2023
- July 2023
- June 2023
- May 2023
- April 2023
- March 2023
- Release Notes
Introduction
- Trend Vision One
- Checking the Trend Vision One Service Status
  - SERVICE LEVEL OBJECTIVES FOR TREND VISION ONE (herein this “SLO”)
Getting Started
- Getting Started with Trend Vision One
- Getting Started with Vulnerability Assessment
Risk Insights
- Executive Dashboard
- Attack Surface Discovery
- Operations Dashboard
Dashboards and Reports
- Security Dashboard
  - Customizing the Security Dashboard
  - Protocol Groups in the Scanned Traffic Summary Widget
- Reports
XDR Threat Investigation
- Detection Model Management
- Workbench
  - Alert View
  - Incident View
    - Incident Details
      - Alerts (Incident View)
      - Incident-based Execution Profile
    - Assigning Incidents
- Search App
- Observed Attack Techniques
- Targeted Attack Detection
- Forensics
- Managed Services
- Companion
Threat Intelligence
- Campaign Intelligence
  - Threat Information Screen
- Intelligence Reports
- Suspicious Object Management
  - Suspicious Object List
  - Exception List
    - Adding Exceptions
- Sandbox Analysis
- Third-Party Intelligence
  - TAXII Feeds
    - Configuring a TAXII Feed
  - MISP Feeds
Workflow and Automation
- Security Playbooks
- Response Management
- Third-Party Integration
- API Automation Center
- Service Gateway Management
Zero Trust Secure Access
- Getting Started with Zero Trust Secure Access
- Secure Access Overview
- Secure Access Rules
- Secure Access Resources
- Secure Access History
- Secure Access Configuration
- Troubleshooting Zero Trust Secure Access
Assessment
- Cyber Risk Assessment
Endpoint Security Operations
- Endpoint Inventory 2.0
- Endpoint Inventory
  - Getting Started with XDR for Endpoints
  - Managing the Endpoint List in Endpoint Inventory 1.0
    - Endpoint List Settings in Endpoint Inventory 1.0
- Endpoint Policies
- Trend Cloud One - Endpoint & Workload Security
Endpoint Security Operations (for Standard Endpoint and Server & Workload Protection)
- Getting Started with Trend Vision One Endpoint Security
- Endpoint Inventory
- Standard Endpoint Protection
- Server & Workload Protection
Cloud Security Operations
- Trend Vision One Container Security
- XDR for Containers
  - Getting Started with XDR for Containers
Network Security Operations
- Network Inventory
- Network Intrusion Prevention
Email Security Operations
- Email Account Inventory
  - Email Sensor Management
Mobile Security Operations
- Getting Started with Mobile Security
- Using Mobile Security in Conjunction with MDM Solutions or Azure AD
- Using Mobile Device Director
Service Management
- Product Connector
  - Connecting a Product
  - Required Settings on Supported Products
- Product Instance
- Cloud Accounts
Administration
- User Accounts, Roles, and Single Sign-On (Legacy)
- User Accounts, Identity Providers, and User Roles (July 2023 update)
- Notifications
- Audit Logs
  - User Logs
    - User Log Data
  - System Logs
    - System Log Data
- Console Settings
- License Information
- Credit Usage
- Support Settings
  - Enabling Hypersensitive Mode
Getting Help and Troubleshooting
- Help and Support
  - Creating a Support Case
- Self-Diagnosis

Risk Index Overview

View detailed information about your company's Risk Index and the contributing Risk Factors.

The Risk Index is determined based off many factors including risk indicators and the number of risky users, devices, and apps accessed over time. The Operations Dashboard app assesses your organization's Risk Index by categorizing risk factors and evaluating how specific indicators affect your network. For a more comprehensive risk assessment, configure more data sources.

Important:

The Risk Index is calculated using all data received from your business without applying management scope limits.

Trend Vision One allows you to mitigate the risks found in your environment by providing remediation steps and preventative measures. For more information, see Risk Assessment.

The following tables provide detailed information about the risk factors that contribute to the Risk Index.

Important:

For customers that signed up for or expressly updated Trend Vision One after July 3, 2023, the event counts of risk factors are only visible for users with full management scope.

Table 1. Exposure Index Risk Factors
Risk Factor	Indicator	Description
Account Compromise	Leaked account	The detection of a user's account on the dark web
	Suspicious user activity	Activity that may indicate the malicious intent of a user that purposefully creates anomalous activity
	Targeted user account	The most at risk user accounts that exhibited high risk anomalous activities or were specifically targeted by malicious email campaigns during the evaluation period
Vulnerabilities	OS vulnerability	The detection of exploitable operating system vulnerabilities on the endpoint
Vulnerabilities	Application vulnerability	The detection of exploitable application vulnerabilities on the endpoint
Activity and Behaviors	Network activity	Anomalous or malicious network activity
	Storage activity	Cloud storage usage (OneDrive/SharePoint/Outlook/Teams) by the account appears abnormal compared to the normal usage by other company accounts
	User activity	Abnormal user behavior patterns and preferences
	Device activity	Abnormal device behavior patterns and preferences
Cloud App Activity	Cloud app reputation	Calculated by Trend Micro threat experts based on historical app data, known security features, and community knowledge
System Configuration	Internet-facing asset configuration	Misconfigured settings on publicly-facing domains and IP addresses
	Cloud infrastructure configuration	Misconfigured settings on cloud infrastructure, such as cloud instances and platforms
	Identity and access configuration	Misconfigured settings on IAM services
	Cloud service configuration	Misconfigured settings on cloud-based applications, software, and services
	Endpoint configuration	Misconfigured security settings on endpoint devices

Table 2. Attack Index Risk Factors
Risk Factor	Indicator	Description
XDR Detection	Workbench alerts	Detection of events by XDR sensors that may be malicious or indicate risk
XDR Detection	Targeted Attack Detection	Detection of early attack indicators by scanning of your Smart Protection Network data
Threat Detection	Web threats	The Web Reputation score of the URLs the user visited or the detection of malicious activity within network traffic
	Email threats	Detection of malicious or anomalous email activity
	Network threats	Detection of malicious activity in monitored endpoint traffic
	Endpoint threats	Detection of events on endpoints that may be malicious
	Mobile device threats	Detection of events on mobile devices that may be malicious
	Connected app activity	Detection of events on Office 365 apps (Teams, SharePoint, OneDrive) that may be malicious

Table 3. Security Configuration Index Risk Factors
Risk Factor	Indicator	Description
Security Configuration	Endpoint security	Detection of agent and sensor deployment, key feature adoption, license health, and agent versions.
	Email security	Coming soon
	Network security	Coming soon