Skip to main content

TrendAI

Integrate TrendAI Vision One with Torq to trigger workflows from Workbench alerts and automate detection, investigation, and endpoint response using API token configuration.

TrendAI Vision One is an enterprise cybersecurity platform that unifies XDR, cyber risk exposure management, and security operations across endpoints, email, servers, cloud workloads, and networks, so you can detect, investigate, and respond to threats from a single console.

Torq enables quick and easy integration with TrendAI Vision One, so you can automate anything and everything within moments. Torq's pre-built TrendAI Vision One steps include:

  • List Alerts

  • Get Alert Details

  • Update Alert Status

  • Add Alert Note

  • Get Endpoint Details

  • Isolate Endpoints

  • Collect File

  • Run Custom Script

  • Add to Block List

  • Submit URLs to Sandbox

  • +21 more...

If you don't see a step you need, you can create your own in various ways, such as using the Send an HTTP Request step or Torq's Step Builder, and share it across your organization.

To trigger a Torq workflow based on events sent from TrendAI, look here.
​

To use TrendAI steps in Torq workflows, look here.

Use TrendAI to trigger workflows in Torq

Step One: Create a TrendAI Vision One trigger integration in Torq

  1. Navigate to integration: In Torq, go to Build > Integrations > Triggers > TrendAI Vision One and click Add Instance.

  2. Configure the integration:

    1. Give the integration a unique and meaningful name.

    2. Click Add.

  3. Save information: Copy and save the webhook URL. You'll need it in TrendAI Vision One.

Step Two: Add the webhook in TrendAI Vision One

  1. Navigate to webhooks: In the TrendAI Vision One console, go to Administration > Notifications > Settings > Webhook List and click Connect.

  2. Configure the webhook:

    1. Webhook name: Enter a unique and meaningful name.

    2. URL: Paste the webhook URL you copied from Torq.

  3. Test: Click Test Connection to verify TrendAI Vision One can reach the endpoint.

  4. Finalize: Click Save.

  5. Attach the webhook to an alert type: Go to Administration > Notifications, select the notification you want to forward (for example, New Workbench alert), add your webhook to the Webhooks list, and save.

Use TrendAI Vision One steps in a Torq workflow

Step One: Generate a TrendAI Vision One API key

  1. Navigate to API keys: In the TrendAI Vision One console, go to Administration > API Keys and click Add API key.

  2. Create a key:

    1. Name: Give the key a unique and meaningful name.

    2. Role: Assign a role that grants the permissions required for the steps you want to run. The token can only call the APIs its role allows.

    3. Expiration time: Set an expiration date.

    4. Status: Set the key to enabled.

    5. Details: Add a relevant description.

  3. Finalize: Click Add.

  4. Save information: Copy and save the authentication token. Be sure to save it somewhere, you cannot access it again after closing the dialog.

Step Two: Create a TrendAI Vision One Steps integration in Torq

  1. Navigate to the integration: In Torq, go to Build > Integrations > Steps > TrendAI Vision One, then click Add Instance.

  2. Set up integration:

    1. Instance name: Give the integration a unique and meaningful name.

    2. Management URL: Enter the regional API endpoint for your tenant, without the https:// prefix.

    3. API Token: Paste the authentication token you copied earlier.

  3. Finalize: Click Add to save.

Related Articles
Did this answer your question?