Trellix ENS Expert Rules

In this repository I’m going to write expert rules I’ve created and researched in order to build better detection/prevention

Tutorials

• Block Access by Group (Local or Domain)

• Block Execution by Command Line

Rules

Resources

• trellix-enterprise/ExpertRules - This repository contains a set of rules samples that can be directly used with Trellix Endpoint Security, in the Exploit Prevention policy.

• Using Expert Rules in ENS to Prevent Malicious Exploits