Is trellix agent always on or does it usually sit on idle and start at certain timeframes?

[xStevex]

Does the Trellix agent remain active at all times or does it typically remain idle and initiate at specific time intervals?

[cdinet]

It is always active, as there are schedules it monitors for internal and assigned tasks, policy enforcement, agent to server communication, etc.  

[Jay_Appell]

The McAfee\Trellix Agent is the communications vehicle between the client and the ePO application. It is always listening. The agent becomes active after it is installed\system is rebooted\reinstalled. If it is properly communicating with the ePO server, has 2 timing intervals. A policy enforcement timer, which will activate to make sure that any product policies are always enforced. And the Agent to Server communication (ASCI) timer that is the heartbeat between ePO and the client, usually 60 minutes unless it is changed in your environment.

That help?