Trellix DLP – SaaS allows you to generate custom queries and build reports from Incident Management.
Use the Query Builder in the Menu → Reporting → Queries & Reports page in ePO - SaaS. Reports package query results into a PDF document, enabling offline analysis.
Find details of how to build custom queries and generate reports from these in the ePO - SaaS Product Guide.