The new docs.trellix.com features a modernized UI and AI-powered conversational search. Content is currently available in English, with additional languages launching in early November 2026. We hope you enjoy the updated experience.

Interface to write Snort rules

Prev Next

The interface for writing a Snort rule is a free-text editor within the Custom Attack Editor. To access the Add Snort Rule editor in the Custom Attack Editor, click the Snort Format tab.

Enter the Snort rule in the Add Snort Rule editor and click Save. The rule and the associated Custom Attack are saved in the Manager client. You can view this attack on the currently selected tab as well as on the All Custom Attacks tab.