Views:

Support response actions on users and devices

In Operations Dashboard, if the customer wants to take response actions on a user account or device, they can click the actions button (Actions menu) in the At-Risk Users/Devices list. Supported actions can be seen in the following screenshot.

Asset 1

 

Asset 2

Click the image to enlarge.

For example, if the customer identifies a risky device and selects Start Remote Shell Session from the actions menu, they can access the following Response Management app dialog. When the customer clicks Create, they are taken to the Response Management app to start a remote shell session on the target device.

Remote Shell Session

Click the image to enlarge.

 

Response Management

Click the image to enlarge.

In Operations Dashboard, response actions can be triggered from the At-Risk Users/Devices list and the All User/Device Risks screen. In Attack Surface Discovery, response actions can be triggered from the asset list.

Device List

Click the image to enlarge.

For support assistance, please contact Trend Micro Technical Support.