Trend Micro Deep Discovery Analyzer

TrendAI™ Deep Discovery™ Analyzer is a turnkey appliance that uses virtual images of endpoint configurations to analyze and detect targeted attacks.

Forensics & Malware Analysis · TrendAI™ Deep Discovery™ Analyzer

Configuration parameters

  • server — DDA Server and Port (e.g https://192.168.0.1:<port>) (required)
  • ip_address — Internal IP address (only needed if the server URL is external)
  • apiKey — API Key
  • credentials_api_key —
  • insecure — Trust any certificate (not secure)
  • proxy — Use system proxy settings
  • protocol_version — Protocol Version

Commands (8)

  • trendmicro-dda-check-status

    Checks the analysis status of the submissions

  • trendmicro-dda-get-brief-report

    Retrieves a brief XML report of a given submission

  • trendmicro-dda-get-openioc Deprecated

    Retrieves IOC for a given submission, returns an error if submission has no IOC

  • trendmicro-dda-get-report

    Retrieves XML report of a given submission

  • trendmicro-dda-get-sample

    Retrieves a sample

  • trendmicro-dda-get-sample-list

    Retrieves a list of SHA1 of samples submitted within the given time interval

  • trendmicro-dda-upload-file

    Upload a file to TrendAI™ DDA

  • trendmicro-dda-upload-url

    Upload a URL to TrendAI™ DDA