Exploit Prevention - Custom Rules

[MartinsVinici]

Hello! I need to learn how to create specific Exploit Prevention policies, but I still don't have the knowledge of the language to develop these policies. What would be the Trellix documentation to better capture this information?

[ZeeArhaan]

Hello @MartinsVinici 

Good day! thank you for your reaching out to Trellix community forum.

Please find the documentation below which will help you in creation of expert rules:

Product Documentation | Trellix

Additionally, if you further would like to fine tune and gain knowledge in regard to language, you may reach out to our professional services team for further assistance.

Trellix Consulting Services | Trellix

Online Professional Services Terms (trellix.com)

Thanks, and Regards

Was my reply helpful?
If you find this post useful, please give it a Kudos! Also, please don't forget to select "Accept as a solution" if this reply resolves your query!

I sincerely hope this helps!

Thanks, and Regards

[Daveb3d]

Sample rules from Trellix, but this is just the tip of the iceberg.  I would start in something like the LOLBAS project and build rules from that, tuned to your environment. AggregateMatch is your best friend for big, complex rules where you want to put a lot into a single rule.  

https://github[.]com/trellix-enterprise/ExpertRules