The new docs.trellix.com features a modernized UI and AI-powered conversational search. Content is currently available in English, with additional languages launching in early November 2026. We hope you enjoy the updated experience.

Why do I see multiple entries of a process from the same host in the Process Guard home page?

Prev Next

Process Guard uses multiple attributes to uniquely identify a process. This includes process file path, file hash, parent process file path, command line, user account, and the action taken, detect or block. If any of these attributes change, it will be treated as a new unique event.