Click to view the rules associated with the threat profile. This section is enabled for a threat profile only if the rules are available for the selected threat profile.
Item | Description |
|---|---|
Trellix Defense Rules | View Trellix Defense rules used to detect the threat profile activity. Copy to clipboard — Click the copy icon to copy the rule. You can filter profiles based on ENS-Expert category which allows you to view ENS-Expert rules. |
Sigma Rules | View Sigma rules used to detect the threat profile activity. Copy to clipboard — Click the copy icon to copy the rule. |
Yara Rules | View Yara rules used to detect the threat profile activity. Copy to clipboard — Click the copy icon to copy the rule. |
Snort Rules | View Snort rules used to detect the threat profile activity. Copy to clipboard — Click the copy icon to copy the rule. |