What Changed

The Trend Micro Cloud App Security CCF connector (TrendMicroCASConnector) has been promoted from Preview to General Availability (v3.1.1). The following changes were made:

  • isPreview flag set to false in the connector UI config: the connector will no longer display a Preview badge in Content Hub.
  • The migration section “Step 2: Migrate from legacy Azure Function connector” has been removed from the connector setup instructions. This optional guidance for transitioning from the legacy Function App connector is no longer included in GA.
  • Graph query and sample query templates have been hardcoded to reference the TrendMicroCASV2 parser/table directly, replacing the {{graphQueriesTableName}} placeholder previously used.
  • The resource provider permissions display text has been simplified from “Read, Write, and Delete” to “Read and Write” — reflecting that Delete permissions are not required for this connector.
  • The PollingConfig.json connector name field has been updated to use an ARM expression incorporating uniqueString(parameters(friendlyName)) for uniqueness, replacing the static TrendMicroCASConnector string.

Security Impact (Visibility & Fidelity)

No detection gaps introduced or closed by this change. The connector has been collecting data into TrendMicroCASV2_CL since v3.0.0 (May 2026); this promotion is a support-tier change, not a functional fix.

Environments running the legacy Azure Function connector that have not yet migrated should note that the migration guidance has been removed from the connector UI. The dual-schema parser alias TrendMicroCAS — covering both TrendMicroCAS_CL (legacy) and TrendMicroCASV2_CL (CCF) — remains in place to support parallel operation during transition.

Detections and Hunting Queries that reference the TrendMicroCAS parser alias are unaffected.

Affected Files

Solutions/Trend Micro Cloud App Security/Data Connectors/TrendMicroCAS_CCF/PollingConfig.json
Solutions/Trend Micro Cloud App Security/Data Connectors/TrendMicroCAS_CCF/TrendMicroCASConnector.json
(packaging artefacts: 3.1.1.zip, ReleaseNotes.md, Solution_Trend Micro Cloud App Security.json, createUiDefinition.json, mainTemplate.json)