The new docs.trellix.com features a modernized UI and AI-powered conversational search. Content is currently available in English, with additional languages launching in early November 2026. We hope you enjoy the updated experience.

Analytics

Prev Next

Helix analytics automate the detection of suspicious activity in your environment using techniques that rules alone cannot provide. Unlike rules, analytics employ a series of detectors that look for specific kinds of activity that are often associated with attackers. Each detector uses a variety of data types from your environment.