Performance alert: Denial-of-service (DoS)

How to use the performance alert to quickly response and appropriately trace the attack?

Create a performance alert to start a Network Monitor capture;
Create a performance alert to monitor the Bytes Total/sec counter;