Skip to main content

 

Splunk Lantern

Trend Micro

The Trend Micro platform delivers central visibility for better, faster detection and response, and a powerful range of advanced threat defense techniques optimized for environments like AWS, Microsoft, and Google.

Before looking at documentation for specific data sources, review the Splunk Help information on general data ingestion for Splunk Enterprise, Splunk Cloud Platform or Splunk Observability Cloud.

Getting data in

Source Add-ons and Apps Guidance

Risk Insights

Trend Micro Risk Insights provides a comprehensive view of an organization's security posture by analyzing website access logs and other data sources. It offers identity and risk insights, enabling administrators to track user access to cloud applications and understand potential security exposures across the organization.

Splunk platform

Trend Micro Risk Insights for Splunk extracts website access logs from Splunk and uploads the data to Trend Micro. Trend Micro then analyzes the data and provides Identity and Risk Insights for your entire organization allowing administrators to track their users' cloud application access.

Cloud App Security

Trend Micro Cloud App Security (CAS) is a solution designed to protect cloud applications and services by providing advanced threat protection, data loss prevention, and compliance capabilities. It offers visibility into security detection statistics for protected cloud environments, helping organizations secure their cloud-based data and applications.

Splunk platform

The Trend Micro Cloud App Security Add-On allows you to view the security detection statistics of your protected cloud applications and services directly on the Splunk dashboard.

Vision One (XDR)

Trend Micro Vision One (XDR) is an extended detection and response platform that provides centralized visibility and correlation across multiple security layers, including endpoints, email, cloud workloads, and networks. It enables faster and more accurate detection of sophisticated threats, offering a workbench for alerts, impacted hosts, users, and indicators to facilitate deeper analysis and response.

Splunk platform

The Trend Micro XDR Splunk Add-On allows customers to receive Trend Micro XDR Workbench Alerts inside Splunk, including impacted host, users and applicable indicators. From here, security analysts can easily drill down for deeper analysis and response.