Follow these steps:
- Go to the Trend Vision One console.
- Click the XDR Threat Investigation “X” button on the left-hand side pane and select Managed Services app.
- On the Managed Services landing page select Settings and Response Approval.
- On the Response approval, tick the “Allows Exceptions” box and click Download CSV template.
- Please do take note that the file would only be accepting hostnames of the declared critical assets, as shown below:For every declared asset you will need to put “hostname” on the left side of the value.
- After completing the list, you may re-upload the file back on the same page and click on the “Import exceptions”.
To know if the upload is successful, it will the last imported timestamp along with the email who uploaded the list.