The Trellix MVISION Operation for ThreatQ enables analysts to fetch enrichment context 

from Insights as well perform actions on their hosts, such as adding or removing tags.

The operation can be run on the following object types:

• Assets (custom object)
• Indicators (all sub-types)