TrendAI

Use TrendAI data in Cortex XSIAM, including Trend Micro endpoint, cloud, email, and XDR integrations.

Important

This connector is only available for tenants that onboarded after July 26, 2026. For tenants that onboarded before this date, use Marketplace to access the standalone integration. For more information, see Marketplace.

Trend Micro security products for endpoint, server, cloud, email, and extended detection and response (XDR). Manage Apex One agents and User-Defined Suspicious Objects, administer Deep Security computers, firewall rules, and policies, protect cloud applications with Cloud App Security, analyze samples with Deep Discovery Analyzer, and collect logs and events from Trend Micro Email Security and Trend Vision One.

This connector includes the following sub-capabilities (Marketplace integrations link to PAN DEV for more information):

• Trend Micro Apex: Trend Micro Apex One central automation to manage agents and User-Defined Suspicious Objects. This sub-capability is available with any active Cortex XSIAM or Cortex AgentiX license.
• Trend Micro Deep Discovery Analyzer: This sub-capability is available with any active Cortex XSIAM or Cortex AgentiX license.
• Trend Micro Deep Security: Cloud Security Protection. This sub-capability is available with any active Cortex XSIAM or Cortex AgentiX license.
• Trend Micro Email Security Event Collector: Palo Alto Networks Trend Micro Email Security Event Collector integration for XSIAM. This sub-capability is available with any active Cortex XSIAM license.
• TrendMicro Cloud App Security: This sub-capability is available with any active Cortex XSIAM or Cortex AgentiX license.
• TrendMicroVisionOneEventCollector: Palo Alto Networks Trend Micro Vision One Event Collector integration for Cortex XSIAM collects the Workbench, Observed Attack Techniques, Search Detections and Audit logs. This sub-capability is available with any active Cortex XSIAM license.

To configure this connector, follow the steps outlined in the configuration wizard.