Trend Micro Apex

TrendAI™ Apex One central automation to manage agents and User-Defined Suspicious Objects.

Category

Endpoint

Pack

TrendMicroApex

Configuration parameters

• url — Server URL (e.g. https://vxsuz5.manage.trendmicro.com) (required)
• application_id — Application ID (required)
• token — API Key
• credentials_api_token —
• insecure — Trust any certificate (not secure)
• proxy — Use system proxy settings

Commands (15)

• trendmicro-apex-endpoint-sensors-list — Retrieves a list of Security Agents with the Endpoint Sensor feature enabled.
• trendmicro-apex-historical-investigation-create — Creates a new historical investigation on all Security Agents with Endpoint Sensor enabled using the specified criteria, search operator, and match condition.
• trendmicro-apex-investigation-result-list — Retrieves a list of all investigation results.
• trendmicro-apex-isolate — Isolate an agent from the network.
• trendmicro-apex-list-logs — Retrieves a maximum of 1000 logs of detection types from the server. The `Pattern Update Status` and `Engine Update Status` log types returns all logs (no maximum) from the specified "since_time". In some cases the command might return alerts that were created before the specified time. This is a known issue with the API.
• trendmicro-apex-managed-servers-list — Retrieves a list of managed product servers reporting to Apex One Central.
• trendmicro-apex-restore — Restore an isolated agent connection to the network.
• trendmicro-apex-security-agents-list — Retrieves a list of Security Agents.
• trendmicro-apex-udso-add — Add suspicious file SHA-1, IP address, domain, or URL objects to the User-Defined Suspicious Object list.
• trendmicro-apex-udso-delete — Delete suspicious file SHA-1, IP address, domain, or URL objects from the User-Defined Suspicious Object list.
• trendmicro-apex-udso-file-add — Adds the uploaded file information to the User-Defined Suspicious Objects list. If the file already exists, it will be updated with the new arguments.
• trendmicro-apex-udso-list — Retrieve a list of User-Defined Suspicious Objects from the Apex One Central server.
• trendmicro-apex-usdo-add — Add suspicious file, file SHA-1, IP address, domain, or URL objects to the User-Defined Suspicious Object list.
• trendmicro-apex-usdo-delete — Delete suspicious file SHA-1, IP address, domain, or URL objects from the User-Defined Suspicious Object list.
• trendmicro-apex-usdo-list — Retrieve a list of User-Defined Suspicious Objects from the Apex One Central server.