TMVOXDR - Vision One XDR Training for Certified Professionals

Trend Micro Vision One XDR Training for Certified Professionals is a three-day, instructor-led training course. Participants will learn how to use the features in Trend Micro Vision One for extended detection response (XDR) activities.

This course describes some of the concepts related to extended detection and  response. Lessons in the course detail how to connect Trend Micro and third-party products to Trend Micro Vision One, how to install XDR sensors on devices in the infrastructure, how to navigate and interpret workbenches, how to incorporate third[1]party threat intelligence, how to search for information within the Trend Micro Vision One data lake, and how to automate responses using Security Playbooks.

This course is taught by Trend Micro-certified trainers and incorporates a variety of hands-on lab exercises, allowing participants to put the lesson content into action.

Code: tmvoxdr

Duration: 3.0 days

Enquire Now

Start learning today!

Click Hereto customize your Training


After completing this course, participants will be able to:

  • Describe the benefits of an XDR solution
  • Connect Trend Micro products to Trend Micro Vision One
  • Collect telemetry from endpoints, email, the web, and the network
  • Integrate third-party products with Trend Micro Vision One
  • Interpret and navigate within Workbenches
  • Use the Search tools to locate information in the data lake
  • Create Playbooks to streamline response activities


XDR Concepts

  • Collecting telemetry
  • Data correlation

Trend Micro Vision One

  • How Trend Micro Vision One fits into the

Trend Micro One platform

  • Trend Micro Vision One core capabilities
  • Trend Micro Vision One features for XDR
  • Trend Micro Vision One apps

Connecting Trend Micro Products

  • Collecting security events
  • Connecting Trend Micro Apex One™ as a Service
  • Connecting Deep Security™ Software
  • Connecting Trend Micro Cloud One™ – Endpoint & Workload Security
  • Connecting Cloud App Security
  • Connecting the Service Gateway
  • Connecting Web Security™
  • Connecting Deep Discovery™ Inspector
  • Connecting TippingPoint™ SMS

Enabling XDR Sensors

  • Installing Endpoint Basecamp
  • Creating Endpoint Groups and Security Policies
  • Enabling endpoint sensors
  • Enabling email sensors
  • Enabling network sensors
  • Enabling web sensors

Integrating with Third-Party Products

  • Integration purposes

Using the XDR Apps

  • XDR apps
  • Viewing raw security event and activity data
  • Filtering security event and activity data
  • Workbenches
  • Workbench actions
  • Execution profiles
  • Network analytics
  • Automating responses
  • Targeted attack detection
  • Response management
  • Managed XDR service

Sharing Threat Intelligence

  • Curated and custom intelligence reports
  • Suspicious object management
  • Sandbox analysis

Searching the Data Lake

  • Simple and complex search syntax
  • Search tips
  • Watchlists

Responding to Incidents Using Security Playbooks

  • Playbook templates
  • Playbook triggers
  • Playbook conditions
  • Playbook actions


This course is geared to members of  an organization’s security operations teams that are responsible for detecting, investigating, prioritizing, and responding to threats who are new to, or have limited knowledge of, Trend Micro Vision One.

This course is also beneficial to administrators responsible for performing initial setup operations such as connecting products to Trend Micro Vision One and enabling XDR sensors on devices


Prerequisites to attend this course include:

  • A working knowledge of Trend Micro endpoint and network protection solutions and services
  • An understanding of basic networking concepts and principles will be helpful



Course Benefits

  • Career growth
  • Broad Career opportunities
  • Worldwide recognition from leaders
  • Up-to Date technical skills
  • Popular Certification Badges

Enquire Now
By clicking "Submit", I agree to the Terms Of Use and Privacy Policy