Online Help Center Home
Privacy and Personal Data Collection Disclosure
- Pre-release Disclaimer
- Pre-release Sub-feature Disclaimer
Trend Vision One Data Privacy, Security, and Compliance
What's New
- June 2023
- May 2023
- April 2023
- March 2023
Introduction
- Trend Vision One
- Checking the Trend Vision One Service Status
  - SERVICE LEVEL OBJECTIVES FOR TREND VISION ONE (herein this “SLO”)
Getting Started
- Getting Started with Trend Vision One
- Getting Started with Vulnerability Prioritization and Assessment
Risk Insights
- Executive Dashboard
- Attack Surface Discovery
- Operations Dashboard
- Security Dashboard
  - Customizing the Security Dashboard
- Report Management
XDR Threat Investigation
- Detection Model Management
- Workbench
  - Alert View
  - Incident View
- Search App
- Observed Attack Techniques
- Targeted Attack Detection
- Forensics and Analysis
  - War Room Tab
    - Workspaces
      - Adding Elements to an Investigation Timeline
  - Packages Tab
    - Evidence Collection
      - Manual Evidence Collection
      - Supported Evidence Types
- Managed Services
Threat Intelligence
- Campaign Intelligence
  - Threat Information Screen
- Intelligence Reports
- Suspicious Object Management
  - Suspicious Object List
  - Exception List
    - Adding Exceptions
- Sandbox Analysis
- Third-Party Intelligence
  - TAXII Feeds
    - Configuring a TAXII Feed
  - MISP Feeds
Workflow and Automation
- Security Playbooks
- Response Management
  - Response Actions
  - Response Data
- Third-Party Integration
- API Automation Center
- Service Gateway Management
Zero Trust Secure Access
- Getting Started with Zero Trust Secure Access
- Secure Access Overview
- Secure Access Rules
- Secure Access Resources
- Secure Access History
- Secure Access Configuration
- Troubleshooting Zero Trust Secure Access
Assessment
- Security Assessment Service
Endpoint Security Operations
- Endpoint Inventory 2.0
- Endpoint Inventory
  - Getting Started with XDR for Endpoints
  - Managing the Endpoint List in Endpoint Inventory 1.0
    - Endpoint List Settings in Endpoint Inventory 1.0
- Endpoint Policies
- Trend Cloud One - Endpoint & Workload Security
Network Security Operations
- Network Inventory
- Network Intrusion Prevention
Email Security Operations
- Email Account Inventory
  - Email Sensor Management
Mobile Security Operations
- Getting Started with Mobile Security
- Mobile Inventory
- Mobile Detection Logs
- Mobile Policy
  - Mobile Policy Data
  - Configuring Mobile Policies
- Risky Mobile Apps
  - Risky Mobile App Data
  - Approved List Data
Point Product Connections
- Product Connector
  - Connecting a Product
  - Required Settings on Supported Products
Account
- Single Sign-On
  - Configuring SAML Single Sign-On
- User Accounts
- User Roles
  - Configuring Custom User Roles
  - Predefined Roles
- Notifications
- Audit Logs
  - User Logs
    - User Log Data
  - System Logs
    - System Log Data
- Console Settings
- License Information
- Credit Usage
- Support Settings
Getting Help and Troubleshooting
- Help Kit
  - Toolbox Resources
  - Simulations
- Self-Diagnosis

eventId and eventSubId Mapping

Table 1. eventId
eventId	Data Field Mapping
2	TELEMETRY_FILE
7	TELEMETRY_INTERNET
15	TELEMETRY_APP
16	TELEMETRY_SYSTEM

Table 2. eventSubId
eventSubId	Data Field Mapping
101	TELEMETRY_FILE_CREATE
102	TELEMETRY_FILE_OPEN
103	TELEMETRY_FILE_DELETE
105	TELEMETRY_FILE_COPY
106	TELEMETRY_FILE_MOVE
601	TELEMETRY_INTERNET_OPEN
602	TELEMETRY_INTERNET_CONNECT
1201	TELEMETRY_APP_START
1202	TELEMETRY_APP_STOP
1203	TELEMETRY_APP_INSTALL
1204	TELEMETRY_APP_UNINSTALL
1301	TELEMETRY_SYSTEM_PREF_EVENT_ENABLE
1302	TELEMETRY_SYSTEM_PREF_EVENT_DISABLE