> For the complete documentation index, see [llms.txt](https://sirogy.gitbook.io/trellix-epolicy-orchestrator-on-prem-5.1/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://sirogy.gitbook.io/trellix-epolicy-orchestrator-on-prem-5.1/product-overview/epo-overview/how-it-works.md).
# How it Works
rellix security software and ePO work together to stop malware attacks on your systems and notify you when they occur. During an attack, ePO components and processes stop an attack, notify you when it occurs, and record the incident.
Click on the numbers below to see what happens during an attack.
