The new docs.trellix.com features a modernized UI and AI-powered conversational search. Content is currently available in English, with additional languages launching in early November 2026. We hope you enjoy the updated experience.

Press CTRL+K to open search

Program tab

  • Published on Sep 1, 2026
  • 1 minute(s) read
Prev Next

You can choose to track or not track all file or registry changes made by a program. When a monitored process or program makes a change, an event is generated on the endpoint and sent to the ePO - On-prem server.

Add processes or programs to be included or excluded from being monitored for changes.

Option definitions

Option

Definition

Add

Opens the Add Program dialog box.

  • Program — Specifies the process or program to be monitored for changes.

  • Include — Monitors changes made by the specified process or program.

  • Exclude — Excludes any specific process or program from being monitored.

  • OK — Monitors changes done by the specified process or program.

  • Cancel — Exits without saving the settings.

Edit

Opens the Add Program dialog box with information for a selected rule. Edit the process or program as required, then click OK.

Remove

Deletes the selected rule from the policy.