Views:

Smart Feedback

Smart Feedback shares anonymous threat information with the Smart Protection Network, allowing Trend Micro to rapidly identify and address new threats.

Data collected
  • Email address
  • File name
  • File path
  • Hostname
  • Suspicious executable files
  • URL
Console locationAdministration > Smart Protection > Smart Feedback
Console settings

Enable Trend Micro Smart Feedback (recommended)

SPN2

Click the image to enlarge.

Back to top

Certified Safe Software Service

The Certified Safe Software Service queries Trend Micro data centers to verify the safety of a program detected by Malware Behavior Blocking, Event Monitoring, Firewall, or antivirus scans.

Data collected
  • File name
  • Company
Console locationAgents > Global Agent Settings > System > Certified Safe Software Service Settings
Console settings

Enable the Certified Safe Software Service for Behavior Monitoring, Firewall, and antivirus scans

Properties

Back to top

Behavior Monitoring

Behavior Monitoring provides a necessary layer of additional threat protection from programs that exhibit malicious behavior.

Data collected
  • URL
  • File name
  • File path
Console locationAgents > Agent Management > Settings > Behavior Monitoring Settings > Rules > Malware Behavior Blocking
Console settings

Enable Malware Behavior Blocking

Properties

Back to top

Predictive Machine Learning

Predictive Machine Learning performs in-depth file analysis to detect emerging unknown security risks.

Data collected
  • URL
  • File name
  • File path
  • Digital signature signer
  • Attachment file name
Console locationAgents > Agent Management > Settings > Predictive Machine Learning Settings
Console settings

Enable Predictive Machine Learning

Properties

Back to top

Sample Submission

Sample Submission enables the Security Agent to detect and send suspicious files that may contain previously unknown threats directly to the Virtual Analyzer for further analysis.

 
Sample Submission only submits the information to Trend Micro servers if you use the hosted Apex One Sandbox as a Service Virtual Analyzer. If you use an on-premises Virtual Analyzer, Trend Micro does not collect this data.
 
Data collected
  • Suspicious executable file
Console locationAgents > Agent Management > Settings > Sample Submission Settings
Console settings

Enable suspicious file submission to Virtual Analyzer

Properties

Back to top

Smart Scan (File Reputation Service)

Smart Scan (File Reputation Services) checks the reputation of each file against an extensive in-the cloud database.

Data collected
  • Agent IP
Console locationAgents > Agent Management > Settings > Scan Settings > Scan Methods
Console settings

Smart Scan

Properties

Back to top

Support Connector Tool (Support Connector Package)

When the customer initiates a troubleshooting request to Trend Micro, the Support Connector Tool can assist in deploying a dedicated Support Connector Package for performing further troubleshooting steps. Starting in Apex One Patch 3 (Build 8358/8378), this tool gets installed by default.

 
Trend Micro will only collect personal data after the customer explicitly provides permission for the collection using the Support Connector Package. Please refer to KB 000232603 to learn more about the Support Connector Tool/Package.
Data collected

Depending on the troubleshooting scope, the Support Connector Package may collect any of the following information:

  • GUID
  • User account
  • Host name
  • Domain name
  • IP address
  • MAC address
  • File name/path/owner
  • Process name/path/owner
  • URL
  • Registry hive
 
Some of the collected information may contain Personally Identifiable Information (PII).
Console locationNot configurable using the web console
Console settingsNot configurable using the web console. If you want to disable Support Connector, please refer to the "Disable Support Connector" section in this article.

Back to top

Web Reputation Service

Web reputation technology tracks the credibility of web domains accessed by endpoints.

Data collected
  • URL
  • Image SHA1 of the process that initiated the URL request
  • IP address
  • Endpoint name
  • Logon user name
Console locationAgents > Agent Management > Settings > Web Reputation Settings > External/Internal Agents
Console settings

Enable Web Reputation on the following operation systems:

  • Windows desktop platforms
  • Windows Server platforms

Properties

Back to top

Web Reputation Service: Browser Exploit Prevention

Browser Exploit Prevention identifies web browser exploits and malicious scripts, and prevents the use of these threats from compromising the web browser.

Data collected
  • Suspicious or malicious URLs
  • HTTP header / HTML files from Suspicious or malicious URLs
  • Browser information
Console locationAgents > Agent Management > Settings > Web Reputation Settings > External/Internal Agents > Browser Exploit Prevention
Console settings

Block pages containing malicious script

Properties

Back to top

Telemetry Agents

Apex One Telemetry Agent / Cloud Endpoint Telemetry Agent

Data collected
  • GUID
  • IP Address
  • File name/path*
  • Process name/path*
  • Apex One program file versions
  • Apex One program settings
  • Apex One performance data
  • Windows file versions
  • Windows performance data

*Some of the collected information may contain Personally Identifiable Information (PII).

Console locationN/A

Back to top

Comments (0)