The new docs.trellix.com offers a modernized UI and AI-powered features like conversational searches. Content is currently available only in English. Other languages will be available in mid-October 2026. We hope you enjoy the new experience.

Module REST API

Prev Next

The following API endpoints are provided by the Process Guard Module.

Note

These API endpoints focus on the retrieval of LSASS process access events. For more information on other Endpoint Security Server API calls, refer to the Endpoint Security REST API Guide Release 5.0.

API

Route

Description

Status

/health/state

GET: Returns the module’s status, for example whether the server component is running or not. If running, it will return healthy.

Meta-data

/grid/metadata

GET: Returns the column definitions and metadata for the grid table.

Events

/grid/data

GET: Returns events in JSON format.

Events

/grid/export

GET: Exports events details in CSV format.

Settings

/grid/settings

GET: Returns the user's settings for the events grid UI POST, which saves the user's settings.

DELETE: Deletes user settings.

Settings

/grid/settings/import

POST: Imports the grid UI settings.