Trellix ePO × AmbactiBring Trellix ePO into
the flow of work.
A little less busywork with Trellix ePO.
Gather contextDo the workReview & share
DXL remote commands4 capabilities+
- Discover ePO server identifiers exposed on the DXL fabric
- List remote commands supported by an ePO server
- Invoke an ePO remote command with parameters
- Find managed systems by search text
DXL threat events2 capabilities+
- Register a callback for ePO threat events
- Unregister a threat-event callback
Frequently asked
questions.
What could an Ambacti integration do with Trellix ePO?
The documented operations include DXL remote commands: Discover ePO server identifiers exposed on the DXL fabric; DXL remote commands: List remote commands supported by an ePO server; DXL remote commands: Invoke an ePO remote command with parameters; DXL remote commands: Find managed systems by search text.
Could I keep a workflow read-only?
For a read-only workflow, limit account permissions to reading data and exclude actions that create, update, or delete records.
Will every action run automatically?
Choose which steps could run on their own and which should pause for review. Changes should follow the permissions and approval rules you set.
Do I need to review actions in Trellix ePO?
Decide which work could run on its own and which steps need your review.