The new docs.trellix.com offers a modernized UI and AI-powered features like conversational searches. Content is currently available only in English. Other languages will be available in mid-October 2026. We hope you enjoy the new experience.

Press CTRL+K to open search

iDump command

  • Published on Sep 14, 2026
  • 1 minute(s) read
Prev Next

The iDump command dumps global variables defined in the rule to the log file if debug logging is enabled.

Note

Exploit Prevention is not supported in the ARM architecture.

Syntax

iDump filter

                  

If filter is not specified, this command dumps all variables.

Parameter

Parameter

Description

filter

String that represents the names of the global variables to dump. The filter parameter can contain wildcards.

For more Expert Rules examples, visit the Trellix Github repository.

Related articles
  • iDump command
    Endpoint Security (ENS) > Trellix Endpoint Security (ENS) 26.x Product Guide - Windows > Using Expert Rules > Learn Expert Rules for files, processes, and registry > Commands to query system state
  • iSystem command
    Endpoint Security (ENS) > Trellix Endpoint Security (ENS) 26.x Product Guide - Windows > Using Expert Rules > Learn Expert Rules for files, processes, and registry > Commands to query system state
  • iSystem command
    Endpoint Security (ENS) > Trellix Endpoint Security (ENS) 10.7.x Product Guide - Windows > Using Expert Rules > Learn Expert Rules for files, processes, and registry > Commands to query system state