A Trellix IPS Custom Attack supports 2 basic classes of test:
Pattern Match - Pattern matches can be used to match ASCII or binary strings. Support for common regular expression constructs is available.
Numeric Comparisons - Numeric comparisons can be used to test for a match with a given value or a range of values, depending on the numeric comparison test chosen.