Trellix ESM comes with predefined queries that you can select on the Query Manager when adding or editing a report or view. You can edit some query settings and add or remove custom queries.
From any view, click Edit or → .
Click Query Manager.
Select a Query Source and the Action you want to take.
Select the Fields you want returned by the query.
Set the Filters and Sorting, then click Finish.