The new docs.trellix.com features a modernized UI and AI-powered conversational search. Content is currently available in English, with additional languages launching in early November 2026. We hope you enjoy the updated experience.

New features and changes

Prev Next

This section describes new features in the Trellix Extended Forensics release 1.1.1.

YARA-based detection

Trellix Extended Forensics 1.1.1 supports YARA 4.2.3 on all operating systems.

    Enhanced error reporting

    Trellix Extended Forensics 1.1.1 now includes error reporting if the YARA rule fails to compile.

    Note

    Trellix Extended Forensics 1.1.1 will also provide you with a compiler error message in the UI or API response if the uploaded YARA file fails to compile.

      Progress bar

      Trellix Extended Forensics 1.1.1 includes a progress bar to convey the progress of the YARA rule upload and processing.

        Listing of YARA rules

        Trellix Extended Forensics 1.1.1 features a listing of YARA rules that have been uploaded.

          Centralized YARA file management

          Trellix Extended Forensics 1.1.1 features the centralization of all YARA file management within a dedicated 'YARA Files' tab in the UI. This includes the upload, export, and delete functionality.

            Important

            The HX UI page must be reloaded to view the new UI for the Extended Forensics.