TrendMicroVisionOneEventCollector

Palo Alto Networks TrendAI Vision One™ Event Collector integration for Cortex XSIAM collects the Workbench, Observed Attack Techniques, Search Detections and Audit logs.

Category

Data Enrichment & Threat Intelligence

Pack

TrendMicroVisionOne

Configuration parameters

• url — Server URL (required)
• credentials — (required)
• max_fetch — The maximum number of events per fetch.
• first_fetch — First fetch timestamp (<number> <time unit>, e.g., 12 hours, 7 days)
• log_types — Log types to fetch
• isFetchEvents — Fetch events
• insecure — Trust any certificate (not secure)
• proxy — Use system proxy settings

Commands (1)

• trend-micro-vision-one-get-events — Returns a list of logs.