---
title: Trend Micro Vision One
description: ''
slug: /help/docs/integrations/automation-integrations/trend-micro-vision-one/
canonical: https://www.sumologic.com/help/docs/integrations/automation-integrations/trend-micro-vision-one/
---
import useBaseUrl from '@docusaurus/useBaseUrl';

<img src=/help/img/platform-services/automation-service/app-central/logos/trend-micro-vision-one.png alt="Trend Micro Vision One icon" width="80"/>

***Version: 1.3  
Updated: April 30, 2026***

The Trend Micro Vision One platform includes advanced XDR capabilities that collect and correlate deep activity data across multiple vectors – email, endpoints, servers, cloud workloads, and networks.

## Actions

* **Get File Analysis Status** *(Enrichment)* - Retrieve status for analyzed file.
* **Add Object To Suspicious Object List** *(Containment)* - Add item to suspicious object list.
* **Delete Object From Suspicious Object List** (*Containment*) - Delete from suspicious object list.
* **Add To Block List** *(Containment*) - Add IoC to block list.
* **Remove From Block List** *(Containment)* - Remove IoC from block list.
* **Get Response Rask Details** *(Enrichment)* - Retrieve task details.
* **Submit File** *(Containment)* - Submit a file.
* **List Alerts** *(Enrichment)* - List all alerts.
* **Get Suspicious Object List** *(Enrichment)* - Retrieve list of suspicious objects.

## Configure Trend Micro Vision One in Automation Service and Cloud SOAR

import IntegrationsAuth from '../../reuse/integrations-authentication.md';
import IntegrationCertificate from '../../reuse/automation-service/integration-certificate.md';
import IntegrationEngine from '../../reuse/automation-service/integration-engine.md';
import IntegrationLabel from '../../reuse/automation-service/integration-label.md';
import IntegrationProxy from '../../reuse/automation-service/integration-proxy.md';
import IntegrationTimeout from '../../reuse/automation-service/integration-timeout.md';

<IntegrationsAuth/>
* <IntegrationLabel/>
* **URL**. Enter your [Trend Micro Vision One API URL](https://automation.trendmicro.com/xdr/Guides/Regional-domains/), for example, `https://api.xdr.trendmicro.com`. Use the region-specific endpoint that matches your tenant's region. For example, for India the URL is `https://api.in.xdr.trendmicro.com`.

* **Token**. Enter your [Trend Micro Vision One API key](https://docs.trendmicro.com/en-us/documentation/article/trend-vision-one-platform-api-keys). To get the API key:
  1. Log in to your Trend Vision One console.
  1. Navigate to **Administration > API Keys**.
  1. Click **Add API Key**.
  1. Configure the API key settings.
  1. Click **Add** to generate the API key.
* <IntegrationCertificate/>
* <IntegrationTimeout/>
* <IntegrationEngine/>
* <IntegrationProxy/>

<img src=/help/img/platform-services/automation-service/app-central/integrations/misc/trend-micro-vision-one-configuration.png style={{border:'1px solid gray'}} alt="Trend Micro Vision One configuration" width="400"/>

For information about Trend Micro Vision One, see [Trend Micro Vision One documentation](https://docs.trendmicro.com/en-us/documentation/trend-vision-one/).

## Change Log

| Version | Date | Description |
|:--|:--|:--|
| v1.3 | April 30, 2026 | Upgraded the `python3_generic` Docker image (Python 3.8) to `python3_12_generic` (Python 3.12) to address Python 3.8 end-of-life and improve security and performance. |
| v1.2 | June 3, 2025 | <ul><li>Fixed a type SHA1 issue in the `Add Object To Suspicious Object List` and `Delete Object From Suspicious Object List` actions.</li><li>Added SHA256 support in the `Add Object To Suspicious Object List` and `Delete Object From Suspicious Object List` actions.</li></ul> |
| v1.1 | June 30, 2023 | Updated the integration with Environmental Variables. |
| | October 28, 2021 | Initial release of the Trend Micro Vision One integration. |