The new docs.trellix.com offers a modernized UI and AI-powered features like conversational searches. Content is currently available only in English. Other languages will be available in mid-October 2026. We hope you enjoy the new experience.

Press CTRL+K to open search

iEnv command

  • Published on Sep 14, 2026
  • 1 minute(s) read
Prev Next

The iEnv command returns the specified environment variable value or an empty string if the variable does not exist.

Note

Exploit Prevention is not supported in the ARM architecture.

Syntax

iEnv name

                  

Parameter

Parameter

Returns

name

Value of the specified environment variable.

Example

set PingExe [iEnv SystemRoot]\\system32\\ping.exe

For more Expert Rules examples, visit the Trellix Github repository.

Related articles
  • iEnv command
    Endpoint Security (ENS) > Trellix Endpoint Security (ENS) 26.x Product Guide - Windows > Using Expert Rules > Learn Expert Rules for files, processes, and registry > Commands to query system state
  • Environment variables
    Endpoint Security (ENS) > Trellix Endpoint Security (ENS) 26.x Product Guide - Windows > Using Expert Rules > Learn Expert Rules for Buffer overflow, Illegal API use and Services > Legacy Syntax
  • Environment variables
    Endpoint Security (ENS) > Trellix Endpoint Security (ENS) 10.7.x Product Guide - Windows > Using Expert Rules > Learn Expert Rules for Buffer overflow, Illegal API use and Services > Legacy Syntax