It's a little lighter compared to the older version, which was mostly signature-based.
Trellix Active Response is a scalable platform designed to efficiently automate detection and response while offering essential alert features. It includes user behavior analytics for remote workers, though improvements are needed in on-prem deployment models and operational technology devices. The newer version is lighter than its predecessor but is currently experiencing support issues. Tech buyers should consider these aspects when evaluating Trellix Active Response.