Trend Micro Cloud App Security

Trend Micro Cloud App Security provides threat and data protection for cloud applications and services such as Google G Suite, Dropbox, Microsoft 365, and more.

Types of Assets Fetched

This adapter fetches the following types of assets:

• Users
  
  

Parameters

1. Host Name or IP Address (required) - The hostname or IP address of the Trend Micro Cloud App Security server.
2. API Token (required) - An API Key associated with a user account that has the Required Permissions to fetch assets.
3. Fetch logs from the last X hours (max. 72) (required, default: 3) - Specify the number of last hours logs data should be fetch.
   • The maximum number of hours supported is 72.
4. Verify SSL (required, default: False) - Verify the SSL certificate offered by the value supplied in Host Name or IP Address. For more details, see SSL Trust & CA Settings.
   • If enabled, the SSL certificate offered by the value supplied in Host Name or IP Address will be verified against the CA database inside of Axonius. If the SSL certificate can not be validated against the CA database inside of Axonius, the connection will fail with an error.
   • If disabled, the SSL certificate offered by the value supplied in Host Name or IP Address will not be verified against the CA database inside of Axonius.
5. HTTPS Proxy (optional, default: empty) - A proxy to use when connecting to the value supplied in Host Name or IP Address.
   • If supplied, Axonius will utilize the proxy when connecting to the value supplied in Host Name or IP Address.
   • If not supplied, Axonius will connect directly to the value supplied in Host Name or IP Address.
6. HTTPS Proxy User Name (optional, default: empty) - The user name to use when connecting to the value supplied in Host Name or IP Address via the value supplied in HTTPS Proxy.
   • If supplied, Axonius will authenticate with this value when connecting to the value supplied in HTTPS Proxy.
   • If not supplied, Axonius will not perform authentication when connecting to the value supplied in HTTPS Proxy.
7. HTTPS Proxy Password (optional, default: empty) - The password to use when connecting to the value supplied in Host Name or IP Address via the value supplied in HTTPS Proxy.
   • If supplied, Axonius will authenticate with this value when connecting to the value supplied in HTTPS Proxy.
   • If not supplied, Axonius will not perform authentication when connecting to the value supplied in HTTPS Proxy.
8. For details on the common adapter connection parameters and buttons, see Adding a New Adapter Connection.
   
   

Advanced Settings

1. Async chunks in parallel (required, default: 50) - Specify the number of parallel requests all connections for this adapter will send to the Trend Micro Cloud App Security server in parallel at any given point.

APIs

Axonius uses the Trend Micro Cloud App Security - Get Security Logs API.

Required Permissions

The value supplied in API Token must have read access to users.
To generate an Authentication Token, see Getting Started with Cloud App Security APIs - Generating an Authentication Token.