There may be times when a rule fires legitimately, but an analyst will not want to see future alerts with the same distinguishers for a certain period of time. In these situations, alert suppression is the best option. For example, an administrator may be doing legitimate work using PSEXEC on a system that causes several alerts to fire. Suppressing this alert for a period of time will allow the administrator to finish their work without creating unneeded Trellix Helix alerts. For more information, see Suppressing alerts.
Alert suppression (Legacy)
- Updated on Sep 13, 2026
- Published on Sep 12, 2026
- 1 minute(s) read
Was this article helpful?