Trend Micro Apex

TrendAI™ Apex One central automation to manage agents and User-Defined Suspicious Objects.

Endpoint · TrendAI™ Apex One

Configuration parameters

  • url — Server URL (e.g. https://vxsuz5.manage.trendmicro.com) (required)
  • application_id — Application ID (required)
  • token — API Key
  • credentials_api_token —
  • insecure — Trust any certificate (not secure)
  • proxy — Use system proxy settings

Commands (15)

  • trendmicro-apex-endpoint-sensors-list

    Retrieves a list of Security Agents with the Endpoint Sensor feature enabled.

  • trendmicro-apex-historical-investigation-create

    Creates a new historical investigation on all Security Agents with Endpoint Sensor enabled using the specified criteria, search operator, and match condition.

  • trendmicro-apex-investigation-result-list

    Retrieves a list of all investigation results.

  • trendmicro-apex-isolate

    Isolate an agent from the network.

  • trendmicro-apex-list-logs

    Retrieves a maximum of 1000 logs of detection types from the server. The `Pattern Update Status` and `Engine Update Status` log types returns all logs (no maximum) from the specified "since_time". In some cases the command might return alerts that were created before the specified time. This is a known issue with the API.

  • trendmicro-apex-managed-servers-list

    Retrieves a list of managed product servers reporting to Apex One Central.

  • trendmicro-apex-restore

    Restore an isolated agent connection to the network.

  • trendmicro-apex-security-agents-list

    Retrieves a list of Security Agents.

  • trendmicro-apex-udso-add

    Add suspicious file SHA-1, IP address, domain, or URL objects to the User-Defined Suspicious Object list.

  • trendmicro-apex-udso-delete

    Delete suspicious file SHA-1, IP address, domain, or URL objects from the User-Defined Suspicious Object list.

  • trendmicro-apex-udso-file-add

    Adds the uploaded file information to the User-Defined Suspicious Objects list. If the file already exists, it will be updated with the new arguments.

  • trendmicro-apex-udso-list

    Retrieve a list of User-Defined Suspicious Objects from the Apex One Central server.

  • trendmicro-apex-usdo-add Deprecated

    Add suspicious file, file SHA-1, IP address, domain, or URL objects to the User-Defined Suspicious Object list.

  • trendmicro-apex-usdo-delete Deprecated

    Delete suspicious file SHA-1, IP address, domain, or URL objects from the User-Defined Suspicious Object list.

  • trendmicro-apex-usdo-list Deprecated

    Retrieve a list of User-Defined Suspicious Objects from the Apex One Central server.