The new docs.trellix.com offers a modernized UI and AI-powered features like conversational searches. Content is currently available only in English. Other languages will be available in mid-October 2026. We hope you enjoy the new experience.

Enricher Module Data Sources

Prev Next

The Enricher Module can submit data to the following data sources for verification:

  • Trellix Intelligence: The Enricher automatically submits data to the context API.

  • Optional additional data sources:

    • Trellix Malware Analysis: You must have an on-premises Malware Analysis appliance for the Enricher Module to submit data to Trellix Malware Analysis.

    • IVX (on-premise) You must have an on-premises Virtual Execution Series appliance for the Enricher Module to submit data to the local IVX.

    • IVX Cloud: You must have an active IVX Cloud subscription.

Note

If you are using the Enricher Module in conjunction with the Process Tracker Module, the Enricher Module acquires many files during the first 48 hours after you enable Process Tracker. Each acquisition the Enricher performs also appears in your list of acquisitions on the Acquisitions page.