A Trellix IPS Custom Attack is like a top-level container in which you define one or more signatures. Some of the critical values that you need to specify when defining an attack are the attack severity, the impact package, and protocol. Based on these values, the Manager categorizes the attack and includes it in the policies.
Note
You must specify at least one impact package or protocol to save a custom attack in the Manager server.