The new docs.trellix.com features a modernized UI and AI-powered conversational search. Content is currently available in English, with additional languages launching in early November 2026. We hope you enjoy the updated experience.

Module REST API

Prev Next

The following API endpoints are provided by the Process Guard Module.

Note

These API endpoints focus on the retrieval of LSASS process access events. For more information on other Endpoint Security Server API calls, refer to the Endpoint Security REST API Guide Release 5.0.

API

Route

Description

Status

/health/state

GET: Returns the module’s status, for example whether the server component is running or not. If running, it will return healthy.

Meta-data

/grid/metadata

GET: Returns the column definitions and metadata for the grid table.

Events

/grid/data

GET: Returns events in JSON format.

Events

/grid/export

GET: Exports events details in CSV format.

Settings

/grid/settings

GET: Returns the user's settings for the events grid UI POST, which saves the user's settings.

DELETE: Deletes user settings.

Settings

/grid/settings/import

POST: Imports the grid UI settings.