The new docs.trellix.com features a modernized UI and AI-powered conversational search. Content is currently available in English, with additional languages launching in early November 2026. We hope you enjoy the updated experience.

Press CTRL+K to open search

Sample TQL search queries

  • Published on Aug 26, 2026
  • 1 minute(s) read
Prev Next

Query description

TQL search query example

File Name (Regex)

"fileAttributes.name:/.*daily.*/"

File Name

"fileAttributes.name:shanya_crypter.exe"

Command Line

"cmdLine:/.*GUP.exe.*/ AND cmdLine:/.*-dexmb25nic6n25sclnf44rrgynq.*/"

Destination IP

"network.dstIp:'10.194.0.191'"

Destination Port

"network.dstPort:'9090'"

Source IP

"network.srcIp:'10.26.21.225'"

Multiple Network Fields

"network.dstIp:'10.194.0.191' network.dstPort:'9090'"

DNS Name (Regex)

"dns.name:/.*glcloud.*/"

Process and Command Line

"cmdLine:/.*conhost.exe.*/ processName:con*"