To activate your MDR app, do the following:
- Log in to your Trend Vision One console using an Administrator account.
- On the left pane, navigate to XDR Threat Investigation > Managed Services.
- On the pop-up window, click Get Started.
- Click Set up Now on the window that appears.
- Set up your contact information:
- Click Add Contact, fill in the necessary information, and then click Submit.
Multiple contacts can be added, depending on your organization's needs and requirements.
- Click on Save to apply the changes.
For additional information, you can refer to Setting up your Contact Information for Trend Micro™ Managed Detection and Response (MDR) - Click Add Contact, fill in the necessary information, and then click Submit.
- Configure the “Response Approval” section to define the actions that the MDR Team can take:
- Tick the Enable auto approval checkbox.
- Under Available Actions, expand either Critical or Recommended and select the response actions:
- For response actions that you want to be automatically approved, tick the box beside the response action.
- For response actions that you want to be manually approved, untick the box beside the response action.
- You can switch between automatic and manual approval whenever needed by ticking or unticking the response action(s).
- To check the description of each response action, refer to Trend Micro™ Managed Detection and Response (MDR) Remote Response Actions
- To know the difference between manual and automatic approval, you can Compare Automatic Approval and Manual Approval for Trend Micro™ Managed Detection and Response Actions
- Go to Notification Recipients and add the contacts (email address or mobile number) you want to be notified when the MDR team performs or requests these response actions.
Mobile recipients should have the Trend Vision One Mobile app installed on their mobile phones to be able to receive notifications from the MDR team.
- Click Save to apply the changes.
- Some informational prompts may appear to show you other features of Trend Vision One. Click Manage Contacts and OK to close the prompts.
Closing the prompts will not affect any of the MDR Settings and configuration.
- Under Managed Services, click on Cross-App Management and click on the first option. This will allow you to automatically close any related workbenches to any resolved MDR cases.
After completing these steps, your Managed Services App is now activated.
For additional configuration for your MDR service, you may refer to the following KB Articles: