The new docs.trellix.com offers a modernized UI and AI-powered features like conversational searches. Content is currently available only in English. Other languages will be available in mid-October 2026. We hope you enjoy the new experience.

Press CTRL+K to open search

Data Aging

  • Published on Sep 11, 2026
  • 1 minute(s) read
Prev Next
Skip to main content

Process Guard receives events from the endpoints for each unique process attempt to access LSASS. These events are stored in the Endpoint Security database for a finite period, after which they are discarded. Use the Data Aging Settings to specify how long to retain events. The default value is 30 days.

Related articles
  • Aging settings
    Endpoint Security Modules (HX) > Process Tracker Module > Endpoint Security Process Tracker Module User Guide Release 1.3.166 > Configuring the Process Tracker module > Configuring the Process Tracker server module
  • Event Throttling
    Endpoint Security Modules (HX) > Process Guard > Endpoint Security Process Guard Module User Guide Release 1.7.0 > Configuring the Process Guard Module‌ > Configuring the Process Guard Agent Policy‌
  • Detecting Processes Accessing LSASS
    Endpoint Security Modules (HX) > Process Guard > Endpoint Security Process Guard Module User Guide Release 1.7.0 > Installing the Process Guard Module‌