The Trellix ePO Events CDF brings in assets (hosts/devices) with threat events from Trellix ePO Saas.

The integration provides the following feed:

• Trellix ePO Events - This feed brings in assets (hosts/devices) with threat events from Trellix ePO Saas.

The integration ingests the following system objects:

• Indicators
• Assets
• Events