Trellix (formerly McAfee Enterprise)

Trellix MVISION (formerly McAfee MVISION) is a cloud-native endpoint and extended detection and response platform that unifies endpoint protection, EDR, and XDR capabilities. It provides AI-guided investigations, automated response actions, and threat intelligence integration across endpoints, networks, and cloud workloads. 

MVISION generates detailed security telemetry including process execution events, threat detections, behavioural indicators, and automated investigation results. These events enable advanced threat detection and investigation, providing visibility across the attack lifecycle from initial compromise through lateral movement and data exfiltration.