---
title: "EDRF overview"
slug: "edrf-overview"
tags: ["EDR with Forensics (EDRF)", "Endpoint Security"]
updated: 2026-08-25T15:17:52Z
published: 2026-08-26T19:31:36Z
canonical: "docs.trellix.com/edrf-overview"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://docs.trellix.com/llms.txt
> Use this file to discover all available pages before exploring further.

# EDRF overview

Trellix Endpoint Detection and Response with Forensics (EDRF) unifies endpoint security by combining Trellix EDR real-time threat detection with Endpoint Security (HX) Forensics investigative capabilities. This integrated solution, managed by Trellix Agent and Trellix ePolicy Orchestrator (ePO), offers a centralized platform to deploy, manage, and respond to threats.

EDRF operates in on-premises, cloud, and hybrid environments, providing comprehensive security for your infrastructure.