This release of IOC Streaming 1.3.167 is supported on Endpoint Security Server 5.3.0 and later with xAgent 35 and later, running on Windows, macOS or Linux.
Note
The IOC Streaming module is supported on Endpoint Security (HX) server 5.3.x with Endpoint xAgent v36 for the deployments that include Mac ARM endpoints.
Since Helix is the only destination for this module, you should configure your Endpoint Security server to communicate with Helix.
Trellix does not recommend installing the IOC Streaming module on versions of Endpoint Security server earlier than 5.1.0 or Agent 35.
For the module to function on the agent, Real-Time Indicator Detection should also be turned on. If you install the module on an agent without this turned on, no activity events will be processed.