Learn about the most common questions regarding TMES 1.6
Attack Discovery rule monitoring feature is not "real-time".
Agent monitoring feature does not monitor the events in real time because agent delay the monitoring for the performance concern. technically, it is called as "asynchronous" monitoring.
Trend Micro Endpoint Sensor identifies affected endpoints through on-demand investigations and "real-time" monitoring that are fully customizable to the user's needs. Integration with Deep Discovery Analyzer provides a comprehensive set of threat details that can help administrators and information security experts respond effectively to attacks.