Modern advanced malware based attacks pose acute security threats to enterprises. Trellix IPS provides several features to detect and prevent the advanced threats prior to infection. You can also detect post infection by monitoring the bot command and control server activity. Trellix IPS provides visibility across multiple network vectors (host, IP, user, and so on) and the ability to correlate this information over a period of time. Once a threat is identified, understanding the root cause and exposure are critical to avoid similar threats in the future.
The primary functionality of the Advanced Malware Protection feature is to provide a prioritized list of hosts that need remediation based on a risk score determined on a set of threat vectors and events correlated over time.