The Trellix EX custom connector is a bi-directional integration that is used to:

• Upload YARA rules from a data collection in ThreatQ to Trellix
• Search for alerts in Trellix EX and create events from those alerts in ThreatQ, including any indicators that have been found in the alerts.

Note:  The Trellix EX connector replaces the FireEye EX connector as of version 1.3.0.