Some malware uses UDP traffic to exfiltrate data. The Endpoint Security (HX) xAgent allows you to monitor and capture UDP network event traffic on your host endpoint so you can review and respond to potential compromises.
You can enable UDP network event capturing through real-time indicator detection processing using the Web UI or the API. This section covers how to enable UDP network event capturing for real-time indicator detection indicator using the Web UI. See the Endpoint Security (HX) REST API Guide for more information on configuring your real-time indicator settings.
Important
On hosts with a high number of events, some events may not be recorded.
Prerequisites
Admin access to the Web UI