The new docs.trellix.com features a modernized UI and AI-powered conversational search. Content is currently available in English, with additional languages launching in early November 2026. We hope you enjoy the updated experience.

Press CTRL+K to open search

Reviewing forensic data

  • Published on Aug 26, 2026
  • 1 minute(s) read
Prev Next

You can review forensic data you have collected from your host endpoints.

Note

If the sum of the unzipped sizes of the audits included in an acquisition (or triage collection) exceeds 3 GB, an error message displays indicating that the acquisition cannot be viewed in the Audit Viewer or in the Triage Viewer.

Exploit Guard data cannot currently be viewed in the Audit Viewer.

Timestamps in the Web UI are presented in UTC time.

Prerequisites

  • Analyst, Senior Analyst, Investigator, or Admin access