The new docs.trellix.com features a modernized UI and AI-powered conversational search. Content is currently available in English, with additional languages launching in early November 2026. We hope you enjoy the updated experience.

Performing forensic analysis with NDR Console

Prev Next

The NDR forensic analysis tools allow you to dive deeper into your captured pcap data and identify signs of threat activity, analyze attack patterns, and discover information about your attacker. View and download event packet data, reconstruct websites and emails, and perform reverse DNS lookup and Whois lookup searches directly in the NDR Web UI.