Trellix: Updated Detection Package for Trellix Intelligent Sandbox Now Available

The Intelligent Sandbox updated content package for versions 4.10, 4.12, 4.14, 5.0, and 5.2 are now available. 

This detection package adds detection updates to Intelligent Sandbox. This update includes the following changes:

New Rules

•  Rules to detect crypto API hooking.
•  Rules to detect IsDebuggerPresent and CheckRemoteDebuggerPresent functions.
  
  

Updated Digital Signature database

• Package build number: 5.2.6.240813

For a full list of changes, see the Release Notes.