Trellix: Where can I find API scripts for Endpoint Detection and Response (EDR)?

This article provides information on the recommended locations for Endpoint Detection and Response (EDR)-related Application Programming Interface (API) scripts.

Important:
- The Activity Feed scripts GitHub page has been deprecated and will no longer be available after April 1, 2025. Please see alternative options in the article below. 
- It is also recommended to refrain from using the scripts available in the mohlcyber GitHub repository as this is not owned by Trellix.

Trellix recommends the following resources for APIs:

• Trellix Developer Portal 
  To read more about the Activity Feed API on the Documentation Portal go to the Endpoint Detection and Response landing page and under Trellix EDR product documents open the Endpoint Detection and Response Product Guide and navigate to Trellix EDR APIs > Trellix EDR APIs for a single customer > API sample for Activity feed.
• Trellix GitHub repository
  The scripts available in the Trellix GitHub are intended to be guidelines to help you integrate with our EDR API and are not supported by Trellix. If you need help integrating scripts with EDR, you can contact Trellix Professional Services.