The Trend Micro Vision One platform includes advanced XDR capabilities that collect and correlate deep activity data across multiple vectors – email, endpoints, servers, cloud workloads, and networks - enabling a level of detection and investigation that is difficult or impossible to achieve with SIEM, EDR, or other individual point solutions. With a combined context, events that seem benign suddenly become meaningful indicators of compromise, and you can quickly contain the impact, minimizing the severity and scope. The XDR functionality of Trend Micro Vision One provides a SIEM connector to forward alerts. By correlating events from Trend Micro products, fewer, higher-confidence alerts are sent, reducing the triage effort required by security analysts. Upon clicking on a SIEM alert, an analyst can access the XDR investigation workbench to get further visibility, conduct deeper analysis, and take necessary action. XDR gets to the heart of what’s important.​