The new docs.trellix.com features a modernized UI and AI-powered conversational search. Content is currently available in English, with additional languages launching in early November 2026. We hope you enjoy the updated experience.

systemrestore Audit

Prev Next

Collects details associated with each restore point of host endpoint systems.

This audit was formerly known as the w32systemrestore audit.

Supported Platforms

Windows only

Input Parameters

The following input parameters are available for this audit.

Prevent Hibernation

Details

Values

Description

Platform

Windows

Windows environments

Format

Bool

Valid values are Boolean values.

Required?

no

This parameter is not required.

Repeatable?

no

This parameter can be specified only once per audit request. It cannot be repeated.

Valid Values

Use Boolean values to indicate whether to prevent the host endpoint from entering hibernation while this audit is executed.