Exploit Guard uses a rules file and a whitelist file during its processing. These files are supplied and maintained by Trellix only. The latest files can be downloaded from Trellix's Dynamic Threat Intelligence (DTI) network.
You may encounter some false positive alerts during Exploit Guard Protection processing. If this happens, contact your Trellix Technical Support representative for assistance.