Respond to emerging threats quickly by importing and installing content packs, which contain use-case driven correlation rules, alarms, views, reports, variables, and watchlists to address specific threat activity.
Content packs are a quick, easy way to get up and running with new content without manually building the components. It also allows you to get updated tools independent of the software release cycle.
Caution
If you have customized the elements in your content packs, the update process might overwrite the customized elements.
Go to the Trellix Connect catalog. Browse the available content packs and download the one you want.
From the Trellix ESM dashboard, click
and select More Settings.On the system navigation tree, select Trellix ESM and click
.Click Content Packs.
Click Browse.
Browse the list and select the content pack you want.
Note
Clicking a name or description shows the details for that content pack. Clicking the checkbox selects the content pack for installation.
Click Install.
Complete any post-installation steps listed in the details of the content pack.