The Managed Detection and Response screen allows you to deploy Managed Detection and Response settings and investigation tasks to specified targets from the Apex Central console.
-
To view the status of Managed Detection and Response task commands, use the Command Tracking screen.
For more information, see Tracking Managed Detection and Response Task Commands.
-
To perform an advanced search for targets that support the Managed Detection and Response Service, use the User/Endpoint Directory screen.
For more information, see Querying Supported Targets.
Use the Managed Detection and Response screen to perform the following tasks.
Task |
Description |
---|---|
Register to the Threat Investigation Center server |
Click the Settings tab to register Apex Central to the Threat Investigation Center server. Apex Central integrates with Trend Micro Threat Investigation Center to enable Managed Detection and Response capabilities. For more information, see Registering Apex Central to the Threat Investigation Center. |
Unregister from the Threat Investigation Center server |
Click the Settings tab to unregister Apex Central to the Threat Investigation Center server. For more information, see Unregistering from the Threat Investigation Center Server. |
Suspend or resume the Managed Detection and Response Service |
Click the Settings tab to suspend or resume the Managed Detection and Response Service. Important:
Suspending the Managed Detection and Response Service stops the receipt of new investigation tasks and the sending of logs to the Threat Investigation Center server. Apex Central does not cancel any ongoing tasks and the results are still sent to the Threat Investigation Center server. For more information, see Suspending or Resuming the Managed Detection and Response Service. |
Approve or reject new investigation tasks |
Click the Pending Tasks tab to approve or reject new investigation tasks. For more information, see Approving or Rejecting Investigation Tasks. |
Track deployed investigation tasks |
Click the Task Tracking tab to track and view approved or rejected investigation tasks and commands. For more information, see Tracking Investigation Tasks. |
View automated analyses |
Click the Automated Analyses tab to view information about the log data that Trend Micro collects to further protect your network. For more information, see Viewing Automated Analyses. |