The new docs.trellix.com features a modernized UI and AI-powered conversational search. Content is currently available in English, with additional languages launching in early November 2026. We hope you enjoy the updated experience.

Behavior pane

Prev Next

The Behavior pane is fundamental in exploring and understanding which methods of attack (tools) are known to be in use. Using the MITRE ATT&CK framework, behaviors associated with these methods demonstrate how breach patterns can occur.

GUID-43035600-C84B-451C-95E9-9FE2CE657C91-low.png
  • Behavior details - This pane provides more visibility on observed behaviors and links to related threats that a countermeasure addresses.

  • Sighting Details - This pane contains additional details on observed behaviors grouped by event. Details found here might also indicate an IOC that you should monitor.