Overview The XDR capabilities of Trend Micro’s Vision One platform provide context-aware investigation, recording, and reporting of system-level activities. It collects detailed activity data from kernel mode, user mode and/or native system events across multiple security layers, including endpoints, servers, cloud workloads, emails, and networks. XDR is composed of Workbench, OAT, Detection Models...etc, it plays as key components to visualize the detections/alerts/impact scope/indicators