When using TIE server on Trellix ePO - On-prem 5.10 or later, you can get an alert is shown in the notifications section.
Trellix TIE server notifies you when a given File or Certificate is considered relevant:
For files, when it's a parent file with not definitive Composite Reputation and it's prevalent.
For certificates, when its reputation is not definite and the impact is high considering the impact as the number of files signed by the certificate and the number of endpoints running those files.
So the administrator retrieves the File or Certificate and acts on them. These notifications are generated by running a weekly Server Task.