Description
The [TrendAI Vision One](https://www.trendmicro.com/en_us/business/products/detection-response/xdr.html) solution for Microsoft Sentinel provides two data connectors that ingest security data from the TrendAI Vision One platform using the Codeless Connector Framework (CCF):
- **Workbench Alerts** – Security incidents, investigations, and alerts with IOC extraction
- **OAT Detections** – MITRE ATT&CK mapped detections with full process trees
This solution also includes KQL parser functions, an analytic rule, and a workbook dashboard for Workbench Alerts.
- Version
- 3.0.1
- Declared author / publisher
- TrendAI
- Support tier
- Partner
Related content
Links established from declared identifiers and solution manifests.
Source provenance
GitHubDisplayed values come from files in Azure/Azure-Sentinel. They describe the published template, not your workspace configuration.
- Commit
9800e51↗- Source identifier
azure-sentinel-solution-trendai-vision-one
GSTEP / CATALOG TRACKING
Added to catalog : 16 Sept 2026 · 05:49 UTC
Last change observed : 16 Sept 2026 · 05:49 UTC