You can configure your Trend Micro Apex One XG device to notify you of security risk
outbreaks. Define an outbreak by the number of detections and the detection period.
Procedure
-
Click .
-
Click the Criteria tab.
-
Type the number of detections and detection period for each security risk.
Note: Notification messages are sent to an administrator when the criteria exceeds the specified
detection limit.
Tip: Trend Micro suggests that you use the default values for the detection number and
detection period.
-
To enable notifications, click the SNMP Trap tab, and select the
Enable notification via SNMP Trap check box.
-
Type the following message in the field:
Number of virus/malware: %CV Number of computers: %CC
Number of spyware/grayware: %CV Number of endpoints: %CC
C&C callback detected: Accumulated log count: %C in the last %T hour(s)
-
Click Save.
What to do next
Configure a log source in QRadar by using the SNMPv2
protocol. For more information, see SNMPv2 log source parameters for Trend Micro Apex One.