It's a little lighter compared to the older version, which was mostly signature-based.
Trellix Active Response is a lightweight, scalable system enhancing detection and response automation, ideal for remote work, and features valuable alerts and user behavior analytics. However, limitations exist with some cloud components lacking on-prem support, and operational technology device improvement is needed. Customer frustration stems from ongoing support issues, where technical support is rated a seven due to difficulties in accessing engineers quickly.