The Incidents sensor

The Incident Sensor is the main XDR component. It is deployed as a Bitdefender Endpoint Security Tools module and needs to be activated in the GravityZone policies applied to the endpoints where you want to gather data from.

Through Bitdefender Endpoint Security Tools , you can gather hardware and operating system data. Following a client-server framework, the metadata is collected and processed on both sides, and the Security Analytics component correlates the events into rich format incidents, ready for investigation in the Incidents page.

Being the main component of XDR, installing and configuring the feature also enables the sensor.