Views:

The Response Management app allows you to take actions and track the actions you have taken on your environment using the Trend Vision One console.

The following table outlines the actions available on the Task List tab in Response Management (Workflow and Automation → Response Management).
Action
Description
Filter response data
Use the Search field and drop-down lists to locate specific task data.
  • Task status: The current status of the command sent to the managing server
    Important
    Important
    The Task status indicates whether the managing server was able to successfully receive and execute the command. If the command target is a Security Agent, the Task status does not necessarily indicate whether the target Security Agent or object successfully executed the command.
  • Action: The command sent to the target
    For more information, see Response actions.
  • Target type: The type of target object
  • Created by: The user that created the task
  • Search: Provides partial matching for the Task ID and Target objects
View task details
View the table to check the status of commands sent to targets.
For more information, see Response data.
Approve or reject tasks
Select and approve or reject the tasks.
For more information, see Require approval for specified response actions.
Take additional action on a task
Depending on the command sent to a target, you may be able to take secondary or follow-up actions.
Select the check box next to a task to access additional action buttons above the table (if applicable).
For more information, see Response actions.
The following table outlines the actions available on the Response Scripts tab in Response Management (Workflow and Automation → Response Management).
Action
Description
Add custom scripts
Under Custom Scripts, click Add script to upload custom Bash or PowerShell script files.
For more information, see Run Remote Custom Script task.
Add osquery queries
Under osquery, click Add query to type a custom osquery. You can check for syntax errors by clicking Validate query.
Note
Note
This action requires multi-factor authentication.
For more information, see Run osquery task.
Add YARA rules
Under YARA Rules, click Add YARA rules to upload a TXT file of custom YARA rules. You can check for syntax errors by clicking Validate YARA rules.
Note
Note
This action requires multi-factor authentication.
For more information, see Run YARA Rules task.
Related information