The new docs.trellix.com offers a modernized UI and AI-powered features like conversational searches. Content is currently available only in English. Other languages will be available in mid-October 2026. We hope you enjoy the new experience.

Press CTRL+K to open search

Host Set Alert Details

  • Published on Sep 11, 2026
  • 1 minute(s) read
Prev Next
Skip to main content

When you select a single Process Guard alert on the Alerts page, the details of the alert are shown on the Hosts page of the Endpoint Security Web UI.

Process Guard Home Page on Endpoint Security Server

PG_Alert_details.PNG

The current version of the Endpoint Security server provides a raw view of the alert details in JSON format. Most of the information available in the Process Guard home page is reformatted to generalize the alerts data coming from various modules. The following alerts represent notable alert fields that the Process Guard Module generates.

Alert Fields

Description

attributes.source_process_path

Process file path accessing LSASS.

attributes. target_process_path

File path of LSASS.

parameters.md5

Hash of the source process file.

signature_verified

True, if the signature of the source process is verified.

signature_exists

True, if the signature exists for the source process.

arguments

Command line arguments passed to source process.

Related articles
  • Process Guard Module Home Page‌
    Endpoint Security Modules (HX) > Process Guard > Endpoint Security Process Guard Module User Guide Release 1.7.0
  • Hosts with alerts
    Endpoint Security Modules (HX) > Process Tracker Module > Endpoint Security Process Tracker Module User Guide Release 1.3.166 > Alerts
  • Alert Settings
    Endpoint Security Modules (HX) > Process Guard > Endpoint Security Process Guard Module User Guide Release 1.7.0 > Configuring the Process Guard Module‌ > Configuring the Process Guard Server Settings‌