The new docs.trellix.com features a modernized UI and AI-powered conversational search. Content is currently available in English, with additional languages launching in early November 2026. We hope you enjoy the updated experience.

Acquiring forensic data

Published on Sep 10, 2026

1 minute(s) read

Prev Next

To investigate alerts and suspicious activity on your host endpoints, you must first acquire forensic data.

Requesting file acquisitions
Requesting triage acquisitions
Requesting a data acquisition
Requesting a Process Detail data acquisition
Requesting Agent diagnostics
Updating acquisition data

Prerequisites

Analyst, Senior Analyst, Investigator, or Admin access

Was this article helpful?