Using Trend Micro Products for Investigation

The following highlights Trend Micro detections and remediation technology that can be used by customers to investigate and help with potential remediation in a customer’s environment.

Trend Vision One™

Trend Vision One customers benefit from attack surface risk management and XDR capabilities of the overall platform, fed by products such as Trend Micro Apex One or Trend Vision One - Endpoint Security, allowing existing customers to stay up to date on the latest information on these vulnerabilities. Leveraging the Risk Insights family of apps, customers can scan for, and identify impacted assets, and stay up to date on latest mitigation steps, including how to use Trend products to detect and defend against exploitation.

Risk Insights > Executive Dashboard

An updated Zero Day Vulnerability page in the Trend Vision One Executive Dashboard has been launched to provide a lot of relevant information in one area for Trend Vision One users and will be updated as more information is released.
 

^{Click the image to enlarge.}

 

Trend Micro Protection and Detection Against Exploitation

First and foremost, it is always highly recommended that users apply the vendor's patches when they become available.  In this case, it is CRITICAL that affected customers apply the patch as soon as possible.

In addition to the vendor patches, Trend Micro does have some supplementary Rules and Filters that may help provide additional protection against further potential exploits.
 

Preventative Rules, Filters & Detection

Trend Cloud One - Network Security & TippingPoint Protection Filters

• 43453: HTTP: Atlassian Confluence Data Center and Server Authentication Bypass Vulnerability

Trend Cloud One - Workload Security & Deep Security IPS Rules

• 1011899: Atlassian Confluence Data Center and Server Improper Authorization Vulnerability (CVE-2023-22518)