This release of IOC Streaming 1.3.166 is supported on Endpoint Security 5.3.3 and later with xAgent 36 and later, running on Windows, macOS or Linux.
Note
The IOC Streaming module is supported on Endpoint Security (HX) server 5.3.0 with Endpoint xAgent v35 for the deployments that do not include Mac ARM endpoints.
Since Helix is the only destination for this module, you should configure your Endpoint Security server to communicate with Helix .
Trellix does not recommend installing the IOC Streaming module on versions of Endpoint Security earlier than 5.1.0 or Agent 35.
For the module to function on the agent, Real-Time Indicator Detection should also be turned on. If you install the module on an agent without this turned on, no activity events will be processed.