The new docs.trellix.com offers a modernized UI and AI-powered features like conversational searches. Content is currently available only in English. Other languages will be available in mid-October 2026. We hope you enjoy the new experience.

Press CTRL+K to open search

Creating a new rule from an existing rule

  • Published on Sep 11, 2026
  • 1 minute(s) read
Prev Next

To create a copy of a rule as the starting point for a new rule, Click the Clone action in the row for the rule to copy. A new view appears presenting all the details of the rule being copied. To avoid confusion, you should modify the Rule name of this copy to keep it distinct from the rule it was copied from. You can then adjust any of the properties of the new rule as you require and submit your updates when they are complete. Your updates is picked up by the IOC Streaming module.

image15.jpeg
:
Related articles
  • Editing a rule
    Endpoint Security Modules (HX) > IOC Streaming > Endpoint Security IOC Streaming Module User Guide Release 1.3.169 > Streaming indicators and conditions > Using HXTool > Managing streaming rules
  • Creating a new rule from scratch
    Endpoint Security Modules (HX) > IOC Streaming > Endpoint Security IOC Streaming Module User Guide Release 1.3.169 > Streaming indicators and conditions > Using HXTool > Managing streaming rules
  • Create a rule group
    Application Control and Change Control > Application and Change Control 6.x > Trellix Application and Change Control 6.6.x - Linux Product Guide > Using the software > Using rule groups in a managed environment > Manage rule groups and policies