The new docs.trellix.com offers a modernized UI and AI-powered features like conversational searches. Content is currently available only in English. Other languages will be available in mid-October 2026. We hope you enjoy the new experience.

Press CTRL+K to open search

DNS lookup event

  • Published on Sep 11, 2026
  • 1 minute(s) read
Prev Next

Event Buffer Attribute

Helix Field Destination

Notes

hostname

domain

The hostname being inquired

pid

pid

The process ID initiating the inquiry

ppath

event_values.ppath

The path for the PE of the process initiating the inquiry

process

process

The name of the process initiating the inquiry

processPath

processpath

The path for the PE of the process initiating the inquiry

username

username

The owner of the process initiating the inquiry

:
Related articles
  • DNS lookup event
    Endpoint Security Modules (HX) > IOC Streaming > Endpoint Security IOC Streaming Module User Guide Release 1.3.167 > Helix data and use cases > Data taxonomy
  • DNS lookup event
    Endpoint Security Modules (HX) > IOC Streaming > Endpoint Security IOC Streaming Module User Guide Release 1.3.166 > Helix data and use cases > Data taxonomy
  • DNS Lookup Event
    Endpoint Security Modules (HX) > IOC Streaming > Endpoint Security IOC Streaming Module User Guide Release 1.2.144 > Helix Data and Use Cases > Data Taxonomy