Trellix (formerly FireEye/Mandiant)

FireEye Malware Protection System (MPS), now part of Trellix, is a network-based advanced threat detection appliance that uses proprietary virtual machine-based analysis to detect zero-day exploits, malware callbacks, and advanced persistent threats in real-time network traffic. It analyses files and web objects traversing the network without relying on signatures. 

FireEye MPS generates detailed alert events for detected malware, callback communications, and exploit attempts, including full execution analysis details from its sandbox environment. These events provide high-confidence threat indicators for security operations, enabling rapid response to advanced threats that evade traditional security controls.