The new docs.trellix.com features a modernized UI and AI-powered conversational search. Content is currently available in English, with additional languages expected in November 2026. We hope you enjoy the updated experience.

Exploit Prevention Events page

Prev Next

View and aggregate events that were triggered when a security violation, as defined by Exploit Prevention signatures, occurred. To prevent events from occurring during legitimate activity, create exclusions.

Option definitions
Category Option Definition
Aggregated on Shows the currently selected columns used for the event aggregation, or None, if no columns are selected for aggregation.
Aggregate button Selects the columns to aggregate the list of events on.

Use this option to determine the frequency of similar events so that you create fewer exclusions.

Note

Exploit Prevention aggregates on the full list of rows, even if you filtered the events before aggregating.

Clear Removes the aggregation settings.
Filter options Preset Filters the list by group:
  • This Group Only — Shows events for the selected group.
  • This Group and All Subgroups — Shows events for the selected group and all subgroups.
Custom Creates a custom filter, using criteria from the Available Properties list, to filter the results displayed in the Exploit Prevention Events page.
  • None — Removes the filter.
  • Filter name — Applies a user-defined filter.
  • Add — Creates a user-defined filter.

    (unsaved) — Indicates that the user-defined filter hasn't been saved yet. Click Save and enter a name for the new filter.

Quick find Filters the list by specifying a term to search for.
  • Apply — Starts the search.
  • Clear — Deletes text from the Quick find field.
Show selected rows Filters out unselected rows, showing only selected rows.
List of events
  • To view event details, click an event.
  • To perform an action on an event, select the checkbox, then select the action from Actions.
  • To sort events, click a column header.
  • To change the columns, select Actions → Choose Columns.
Actions Choose Columns Opens the Choose Columns page where you can select the columns to display.
Export Table Export all events in the display to a defined format.
Add Exclusion Create an exclusion based on selected events.

You can select multiple events to create exclusions from. Exploit Prevention skips any repeated events. Exclusions are created and added automatically to the Exclusions list in the destination Exploit Prevention policy.