Overview
The Trellix series is a group of analysis platforms that gives you hands-on control over powerful, auto-configured test environments where they can safely execute and inspect advanced malware, zero-day, and targeted advanced persistent threat (APT) attacks embedded in common file formats, email attachments, and Web objects. With advanced instrumentation, the Trellix Multi-Vector Virtual Execution (MVX) engine provides forensic details on the exploit, such as the vulnerability exploited to create a buffer overflow condition, attempts to escalate privileges within Windows, and the callback coordinates used to ex-filtrate data. The integration between Trellix AX and EPM gives clients the ability to analyze files in a sandbox environment, remove any exploitable elements and produces a report about the file contents including details of potential malicious behavior.
** This intergradation is only supported with EPM On-Prem.