The new docs.trellix.com offers a modernized UI and AI-powered features like conversational searches. Content is currently available only in English. Other languages will be available in mid-October 2026. We hope you enjoy the new experience.

Press CTRL+K to open search

Windows events rules

  • Published on Sep 12, 2026
  • 1 minute(s) read
Prev Next

Windows events rules are used to generate events that are related to Windows.

They are data source rules for Windows events and are separated from the data source rule type because they are a different type of rule. Trellix defines these rules; you can't add, change, or delete them, but you can change their property settings.

Related articles
  • Windows events rules
    Enterprise Security Manager > Enterprise Security Manager 11.7.x > ESM 11.7.x Product Guide > Defining policies and rules > Rules > Trellix ESM rule types
  • Device control rules
    Data Loss Prevention (DLP) > Trellix Data Loss Prevention 11.14.x Product Guide > Using rules and policies to protect sensitive content > Defining rules to protect sensitive content
  • Device control rules
    Data Loss Prevention (DLP) > Data Loss Prevention On-prem > Trellix Data Loss Prevention 11.11.x Product Guide > Using rules and policies to protect sensitive content > Defining rules to protect sensitive content