The Trend Micro Deep Security Action integration is designed to export a ThreatQ data collection comprised of IP Addresses, CIDR Blocks, IPv6 Addresses from ThreatQ to a Trend Micro Deep Security on-premise or cloud instance. These data collections are accepted as IP Lists within Trend Micro and are typically used for policies.

The integration provides the following action:

• Trend Micro Deep Security - Export Indicators - uploads indicators to an IP List in Trend Micro.

The action is compatible with Asset and Indicator type system objects.

Note: This action is intended for use with ThreatQ TDR Orchestrator (TQO). An active TQO license is required for this feature.