What is Trellix HX?

OIT Security has deployed Trellix (formerly FireEye) Endpoint Security HX as the EDR solution for campus, also used throughout the UC system. Trellix HX is used to detect malware and/or viruses that antivirus software has difficulty locating on the endpoint, and attacks that can’t be seen on the network. Additionally, it allows the OIT Security to efficiently perform deep analysis on the malware to determine how the system became infected and help prevent further spread. Trellix HX automates some time-consuming steps of incident response and helps with forensics investigations.

Key Features

Trellix HX offers several features to help organizations detect, investigate, and respond to advanced threats on their endpoints.

1. Real-time detection and response: provides continuous monitoring of endpoints to detect and respond to threats in real-time.
2. Signature-based detection: uses signature-based detection to identify known threats and malware.
3. Behavioral analysis: uses behavioral analysis to detect anomalous behavior on endpoints, even if the threat is previously unknown.
4. Machine learning:  uses machine learning to improve threat detection and reduce false positives.
5. Threat intelligence integration: integrates with the FireEye Threat Intelligence platform to provide additional threat intelligence and context.
6. Incident response: provides a centralized console for security teams to investigate and respond to security incidents.
7. Reporting and analytics: provides reporting and analytics to help organizations understand their security posture and identify areas for improvement.