Unified Compliance Framework (UCF) is an organization that maps the specifics of each regulation to harmonized control IDs. As regulations change, these IDs are updated and pushed to Trellix ESM.
To add UCF filters, click the filter icon next to the Compliance ID field and select compliance values to use as filters. Then, click →
.png "GUID-9E27FAD7-66B6-444F-A303-6A2D91FAFBD1-low.png")
To add Windows event ID filters, click the filter icon next to the Signature ID and select the Windows tab on Filter Variables. Then, type the Windows Event IDs (comma separated) in the text field, or select the values you want to filter by on the list.