The new docs.trellix.com features a modernized UI and AI-powered conversational search. Content is currently available in English, with additional languages launching in early November 2026. We hope you enjoy the updated experience.

Commonly used taxonomy

Prev Next

This section covers categories of events commonly used in the Helix Enterprise taxonomy. It provides a brief description of each category, metaclasses that reference the events (if any), fields in the event data, and how Helix Enterprise uses the event data.

Note

Many of the fields included in this section are commonly used in detection, but it should not be considered a full list of such fields.