The new docs.trellix.com features a modernized UI and AI-powered conversational search. Content is currently available in English, with additional languages launching in early November 2026. We hope you enjoy the updated experience.

Workflows

Prev Next

Overview

Create adaptive workflows driven by business goal and process outcomes independent of the applications. Develop process maturity with spec-based workflows that identify potential gaps and business optimizations to pursue

Operators

Below is the list of operators that users can use for no code automation:

  • Parallel: Execute unlimited parallel operations. For example, fetch forensic data from multiple sources in parallel.

  • AI: Use your choice of LLM and make it part of a workflow.

  • Script: Write custom code for your business logic and make it part of the workflow.

  • HTTP: Connect any tool or product API and avoid dependency on the vendor for out-of-the-box integration.

  • DB: Connect any generic database and avoid dependency on the vendor for out-of-the-box integration.

  • Sub-Workflow: Create sub-workflows for commonly used tasks or steps, and use across variety of main workflows.

  • KV: Create a global key-value pair that can be used across workflows.

  • Wait: Wait for a given time. This is important when a connected application requires polling and does not support webhooks. Also, can be used how wait is typically used in programming.

  • Loop: Execute single or multiple operations in a loop.

  • Break: Break the loop when a defined condition is met.

  • Condition: Execute operations based on the true or false for a given condition. Users can add as many nested conditions as needed.

  • Search: Search as part of a workflow. Use this operator to search on certain artifacts such as files, devices, containers, and users, and when found execute a workflow of actions.