The new docs.trellix.com features a modernized UI and AI-powered conversational search. Content is currently available in English, with additional languages launching in early November 2026. We hope you enjoy the updated experience.

Rule command

Prev Next

The Rule command defines an AAC rule. Each Expert Rule identifier can contain only one rule definition.

Note

Exploit Prevention is not supported in the ARM architecture.

Description

This command takes no arguments and can contain one or more Initiator, Process, and Target commands. Only the Target command is required.

Syntax

  Rule	{
	Initiator …
	Process …
	Target …
}