
Apr 2, 2025
1.3.0
ThreatQ versions >= 6.7.3
Trellix TIE Operation
Overview
Trellix is the device-to-cloud cybersecurity company. Inspired by the power of working together, Trellix creates business and consumer solutions that make our world a safer place for the benefit of all. Our holistic, automated open security platform allows all your disparate products to co-exist, communicate, and share threat intelligence with each other anywhere in the digital landscape. Where machine automation is converged with human intelligence so you can streamline workflows more efficiently. Where your team is freed from unnecessary operational burden and is empowered to strategically fight adversaries. Where you can orchestrate all things security through a single management system. Where all your security products adapt to new threats skillfully and work synergistically to increase protection, and speed up detection and correction—across the entire threat defense lifecycle.
The Trellix TIE operation has get and set actions. The get action queries the configured TIE server for any threat information for the indicator in question. The set operation sets the Enterprise Threat Level of the indicator in question on the TIE server.
Actions Include:
- Query Reputation
- Set Reputation