Creating new rules from scratch requires a level of research and knowledge. You can customize existing Trellix rules to save time and effort. The updated rule remains a Trellix rule with the same rule ID.
You can change the values of fields in the Settings panel. You cannot change the values of fields in the Definition panel. If you want to change the fields in the Definition panel, you must first clone the Trellix rule. For more information, see Clone a rule.
To customize a Trellix rule:
On the Rules page, find the Trellix rule you want to modify.
Select Edit from the options menu at the end of the row.
Change the values of the fields in the Settings panel, as needed.
Click Save.