Predictive Machine Learning
Trend Micro Predictive Machine Learning uses advanced machine learning technology to correlate threat information and perform in-depth file analysis to detect emerging unknown security risks through digital fingerprinting, API mapping, and other file features.
Data collected | Metadata (attachment name) of suspicious executable files and scripts in email attachments |
---|---|
Console location | Security Risk Scan > Target > Advanced Threat Scan Engine |
Console settings |
Enable Predictive Machine Learning Click the image to enlarge. |
Predictive Machine Learning Feedback
Predictive Machine Learning feedback enables you to participate, share and leverage Trend Micro’s global database of threat related intelligence to rapidly identify and defend against potential threats within your unique network environment.
Virtual Analyzer
Virtual Analyzer is a cloud sandbox designed for analyzing suspicious applications, files, scripts and unrated URLs. Sandbox images allow observation of application, file, script and URL behavior in an environment that simulates endpoints on your network without any risk of compromising the network.
Data collected |
|
---|---|
Console location | Virtual Analyzer |
Console settings |
Submit email messages to Virtual Analyzer Click the image to enlarge. |
Advanced Spam Prevention
ScanMail uses Trend Micro Antispam Engine to provide advanced spam protection, as a complement to the email protection service on your email gateway side, to further protect Exchange Online users from BEC, ransomware, advanced phishing, and other high-profile attacks.
Data collected |
|
---|---|
Console location | Advanced Spam Prevention |
Console settings |
Enable Advanced Spam Prevention Click the image to enlarge. |
Advanced Spam Protection Feedback
Advanced Spam Protection feedback enables you to participate, share and leverage Trend Micro’s global database of threat related intelligence to rapidly identify and defend against potential threats within your unique network environment.
Data collected |
|
---|---|
Console location | Advanced Spam Protection > Action > Feedback |
Console settings |
Send Feedback to Trend Micro Smart Protection Network Click the image to enlarge. |
Writing Style Training
ScanMail collects email messages sent by high profile users to learn their writing style if writing style analysis is enabled. Email messages are hashed before collecting and cannot be restored.
Data collected |
|
---|---|
Console location and settings |
Writing Style Verification
Writing Style Verification adds an additional layer of security to corporate email messages. The writing style verification for high profile users requires ScanMail to analyze and learn the specific writing style for each user.
If ScanMail detects a suspicious incoming email message, it sends a copy of the original email message to the security/IT group for manual verification.
Data collected | Original email message from sender |
---|---|
Console location | Writing Style Verification Settings |
Console settings |
Attach original email message from sender image |
Web Reputation
ScanMail leverages Trend Micro Web Reputation Services to scan URLs contained in files, email bodies and attachments to detect malicious URLs based on their reputation scores.
Data collected |
|
---|---|
Console location | ATP policy > Web Reputation |
Console settings |
Enable Web Reputation Click the image to enlarge. |
URL Time-of-Click Protection
ScanMail leverages Trend Micro’s URL Time-of-Click Protection service to provide the ability to configure ScanMail to rewrite the URLs in the email message body during scanning, and analyze these URLs only when the message recipient clicks on these URLs.
Data collected | URLs in email body |
---|---|
Console location | URL Time-of-Click Protection |
Console settings |
Enable URL Time-of-Click Protection for incoming mail Click the image to enlarge. |
Email Reputation
ScanMail leverages Trend Micro Email Reputation Services to verify IP addresses of incoming email messages using one of the world's largest, most trusted reputation database, along with a dynamic reputation database to identify new spam and phishing sources, stopping even zombies and botnets as they first emerge.
Data collected | IP addresses of email messages |
---|---|
Console location | Spam Prevention > Email Reputation |
Console settings |
Enable Email Reputation Click the image to enlarge. |
Cloud App Security Integration
Cloud App Security can integrate with one or several ScanMail servers deployed within your organization to provide visibility of policy violation logs from these servers.
Cloud App Security automatically deletes logs older than 90 days.
Data collected |
|
---|---|
Console settings |
Click the image to enlarge. |