Trend Micro Deep Discovery Analyzer

TrendAI™ Deep Discovery™ Analyzer is a turnkey appliance that uses virtual images of endpoint configurations to analyze and detect targeted attacks.

Category

Forensics & Malware Analysis

Pack

TrendMicroDDA

Configuration parameters

• server — DDA Server and Port (e.g https://192.168.0.1:<port>) (required)
• ip_address — Internal IP address (only needed if the server URL is external)
• apiKey — API Key
• credentials_api_key —
• insecure — Trust any certificate (not secure)
• proxy — Use system proxy settings
• protocol_version — Protocol Version

Commands (8)

• trendmicro-dda-check-status — Checks the analysis status of the submissions
• trendmicro-dda-get-brief-report — Retrieves a brief XML report of a given submission
• trendmicro-dda-get-openioc — Retrieves IOC for a given submission, returns an error if submission has no IOC
• trendmicro-dda-get-report — Retrieves XML report of a given submission
• trendmicro-dda-get-sample — Retrieves a sample
• trendmicro-dda-get-sample-list — Retrieves a list of SHA1 of samples submitted within the given time interval
• trendmicro-dda-upload-file — Upload a file to TrendAI™ DDA
• trendmicro-dda-upload-url — Upload a URL to TrendAI™ DDA