Detection Model Management
Trend Vision One triggers alerts based on the matched detection models and sends the alerts to Workbench.
The detection models, which generate the alert triggers, combine multiple rules and filters using a variety of analysis techniques including data stacking and machine learning. Moreover, Trend Micro regularly refines and adds detection models and filters to improve threat detection capabilities and reduce false positive alerts.
- Detection Models
The Detection Models screen lists all the detection models that Trend Vision One provides. - Custom Models
Custom models allow you to trigger Workbench alerts based on user-defined event filters. - Exceptions
Exceptions exclude specified objects and events from detection models, helping to eliminate false positives and reduce alert fatigue.
Parent topic: XDR Threat Investigation
