This article discusses the Lockdown feature in Apex One as a Service, mainly how to find out if there is an ongoing inventory scan and if the endpoint has entered Lockdown status.
After enabling the Lockdown option in Apex One Security Agent Policy and deploying it to a target endpoint, the Apex One Security Agent will trigger an inventory scan by running a process name TMiACHashGen.exe and creating an inventory database in %ProgramFiles\Trend Micro\iService\iAC\ac_data\ac_rule with an invt-{Epoch-time}.sha2.db format.
Once the Apex One Security Agent enters Lockdown mode, the Application Control on the local endpoint will have a padlock icon beside it.
For more information about Apex One as a Service or any of our Trend Micro products, please visit our Online Help Center.