---
title: "Exploit Prevention Events page"
slug: "exploit-prevention-events-page"
tags: ["Reference", "ENS 10.7.x"]
updated: 2026-08-31T16:22:36Z
published: 2026-10-06T19:45:38Z
canonical: "docs.trellix.com/exploit-prevention-events-page"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://docs.trellix.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Exploit Prevention Events page

View and aggregate events that were triggered when a security violation, as defined by Exploit Prevention signatures, occurred. To prevent events from occurring during legitimate activity, create exclusions.

 

| Category | Option | Definition |
| --- | --- | --- |
|  | **Aggregated on** | Shows the currently selected columns used for the event aggregation, or **None**, if no columns are selected for aggregation. |
| **Aggregate** button | Selects the columns to aggregate the list of events on. Use this option to determine the frequency of similar events so that you create fewer exclusions. > [!NOTE] > Note > > Exploit Prevention aggregates on the full list of rows, even if you filtered the events before aggregating. |
| **Clear** | Removes the aggregation settings. |
| *Filter options* | **Preset** | Filters the list by group: - **This Group Only** — Shows events for the selected group. - **This Group and All Subgroups** — Shows events for the selected group and all subgroups. |
| **Custom** | Creates a custom filter, using criteria from the **Available Properties** list, to filter the results displayed in the **Exploit Prevention Events** page. - **None** — Removes the filter. - *Filter name* — Applies a user-defined filter. - **Add** — Creates a user-defined filter. *(unsaved)* — Indicates that the user-defined filter hasn't been saved yet. Click **Save** and enter a name for the new filter. |
| **Quick find** | Filters the list by specifying a term to search for. - **Apply** — Starts the search. - **Clear** — Deletes text from the **Quick find** field. |
| **Show selected rows** | Filters out unselected rows, showing only selected rows. |
| *List of events* |  | - To view event details, click an event. - To perform an action on an event, select the checkbox, then select the action from **Actions**. - To sort events, click a column header. - To change the columns, select **Actions** → **Choose Columns**. |
| **Actions** | **Choose Columns** | Opens the **Choose Columns** page where you can select the columns to display. |
| **Export Table** | Export all events in the display to a defined format. |
| **Add Exclusion** | Create an exclusion based on selected events. You can select multiple events to create exclusions from. Exploit Prevention skips any repeated events. Exclusions are created and added automatically to the **Exclusions** list in the destination **Exploit Prevention** policy. |