The new docs.trellix.com features a modernized UI and AI-powered conversational search. Content is currently available in English, with additional languages launching in early November 2026. We hope you enjoy the updated experience.

EDRF overview

Prev Next

Trellix Endpoint Detection and Response with Forensics (EDRF) unifies endpoint security by combining Trellix EDR real-time threat detection with Endpoint Security (HX) Forensics investigative capabilities. This integrated solution, managed by Trellix Agent and Trellix ePolicy Orchestrator (ePO), offers a centralized platform to deploy, manage, and respond to threats.

EDRF operates in on-premises, cloud, and hybrid environments, providing comprehensive security for your infrastructure.