The new docs.trellix.com offers a modernized UI and AI-powered features like conversational searches. Content is currently available only in English. Other languages will be available in mid-October 2026. We hope you enjoy the new experience.

Press CTRL+K to open search

New features and changes

  • Published on Sep 11, 2026
  • 1 minute(s) read
Prev Next

This section describes new features in the Trellix Extended Forensics release 1.1.1.

YARA-based detection

Trellix Extended Forensics 1.1.1 supports YARA 4.2.3 on all operating systems.

    Enhanced error reporting

    Trellix Extended Forensics 1.1.1 now includes error reporting if the YARA rule fails to compile.

    Note

    Trellix Extended Forensics 1.1.1 will also provide you with a compiler error message in the UI or API response if the uploaded YARA file fails to compile.

      Progress bar

      Trellix Extended Forensics 1.1.1 includes a progress bar to convey the progress of the YARA rule upload and processing.

        Listing of YARA rules

        Trellix Extended Forensics 1.1.1 features a listing of YARA rules that have been uploaded.

          Centralized YARA file management

          Trellix Extended Forensics 1.1.1 features the centralization of all YARA file management within a dedicated 'YARA Files' tab in the UI. This includes the upload, export, and delete functionality.

            Important

            The HX UI page must be reloaded to view the new UI for the Extended Forensics.

            :
            Related articles
            • YARA rules
              Email Security - Server > Email Security - Server User Guide Release 11.x > Configuration > System configuration > YARA rules
            • New features and changes
              Endpoint Security Modules (HX) > Extended Forensics > Endpoint Security (HX) Extended Forensics Module Release Notes 1.1.x > 1.0
            • YARA rules
              Endpoint Security Modules (HX) > Extended Forensics > Endpoint Security (HX) Extended Forensics Module User Guide Release 1.1.X > The module home page > Managing jobs