The new docs.trellix.com features a modernized UI and AI-powered conversational search. Content is currently available in English, with additional languages launching in early November 2026. We hope you enjoy the updated experience.

Press CTRL+K to open search

Enabling the Block on Detection

  • Published on Sep 11, 2026
  • 1 minute(s) read
Prev Next
Skip to main content

To block access when Process Guard detects an attack, enable the Block on Detection toggle. When the configuration updates on the agent, the Process Guard Module will block attackers from obtaining credential data or key material stored within the LSASS process.

Note

This behavior has changed since the technical preview release, which blocked the processes by default when there was no detection only capability.