Trellix Application Control

Intelligent Whitelisting

Blocks execution of unauthorized applications to prevent zero-day and APT attacks through application whitelisting mechanisms

Global Threat Intelligence Integration

Utilizes Trellix GTI with millions of sensors worldwide to track real-time reputation of files, messages, and senders

Advanced Execution Control

Combines multiple rule types including file name, process name, parent process name, command line parameters, and username for enhanced protection

Observation Mode

Enables discovery of policies for dynamic desktop environments without enforcing whitelisting lockdown

User Self-Approval Capabilities

Provides IT capabilities to enable users to install new applications through user notifications and self-approval workflows