This section covers categories of events commonly used in the Trellix Helix taxonomy. It provides a brief description of each category, metaclasses that reference the events (if any), fields in the event data, and how Trellix Helix uses the event data.
Note
Many of the fields included in this section are commonly used in detection, but it should not be considered a full list of such fields.