About the Trellix Endpoint Security (ENS) Integration
Trellix Endpoint Security (ENS) is Trellix’s integrated endpoint protection platform, providing threat prevention, firewall, web control, and adaptive threat protection to defend endpoints against malware, ransomware, and advanced attacks. Part of Synqly’s EDR Unified API, the Trellix Endpoint Security (ENS) integration enables security teams to access normalized endpoint detection and response data—including detections, alerts, and endpoint telemetry—through a standardized connector. Integrate with Trellix Endpoint Security to incorporate endpoint threat context into your SIEM, threat detection, and security operations workflows, enabling faster investigation and response.
Integration Use Cases
Get Endpoint
Gets a single endpoint assets matching the UID from the token-linked EDR source.
Query EDR Events
Returns a list of EDR events that match the query from the token-linked EDR source.
Query Endpoints
Returns a list of endpoint assets matching the query from the token-linked EDR source.
Query Threat Events
Returns a list of threats that match the query from the token-linked EDR source.
