Customer rule packs are collections of rules that have been authored by you or your organization. Customer rule packs are optional, and can be used by customers to organize sets of similar rules, or rules that detect similar attacks in different ways.
You can enable or disable entire customer rule packs at once, or enable or disable individual rules within a customer rule pack. Unlike Trellix rule packs, you are free to add or remove rules to customer rule packs. Rules can be added to or removed from customer rule packs at any time, and can happen during the rule creation process or afterward. You must add rules to a rule pack in order for them to function.