The new docs.trellix.com offers a modernized UI and AI-powered features like conversational searches. Content is currently available only in English. Other languages will be available in mid-October 2026. We hope you enjoy the new experience.

Initiator command

Prev Next

The Initiator command in a Rule command defines the AAC initiator matches. Only processes can be initiators.

Note

Exploit Prevention is not supported in the ARM architecture.

Description

This command takes no arguments and can contain only Match commands.

A Rule command must contain at least one Initiator command and can contain multiple Initiator commands. If the value isn't specified, the rule uses ** to indicate all processes.

Syntax

Rule { 
	…
	Initiator	{
		Match … 
	}
	…
}