The new docs.trellix.com features a modernized UI and AI-powered conversational search. Content is currently available in English, with additional languages launching in early November 2026. We hope you enjoy the updated experience.

File transfer information

Prev Next

Events pertaining to file transfers through HTTP, FTP, and SMP protocols.

These events belong to the file-xfer metaclass.

The filename field is used in Trellix rules and analytics. The md5,sha1, and sha256 fields are used in intel matching.

Taxonomy

Type

Description

filename

string

File name or path

filepath

string

File path

hash

string

Any type of message digest hash value

md5

string

MD5 hash value

sha1

string

SHA1 hash value

sha256

string

SHA256 hash value

size

string

File size