| DisplayName | ID | Target | Category | Enabled | Alert Generate |
| AgentNotRegistered | AgentNotRegisterd_1_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Edge_Transport_Installation | EventCollection | True | True |
| AgentNotRegistered | AgentNotRegisterd_3_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Hub_Transport__Mailbox__Public_Folder_Installation | EventCollection | True | True |
| AgentNotRegistered | AgentNotRegisterd_4_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Hub_Transport_Installation | EventCollection | True | True |
| CCRReplicationServiceClusterMonitorEndE | CCRReplicationServiceClusterMonitorEndE_2_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___All_Servers_Installation | EventCollection | True | True |
| CCRReplicationServiceClusterMonitorNotifyFailE | CCRReplicationServiceClusterMonitorNotifyFailE_2_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___All_Servers_Installation | EventCollection | True | True |
| CCRReplicationServiceClusterMonitorOpenClusterErrorE | CCRReplicationServiceClusterMonitorOpenClusterErrorE_2_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___All_Servers_Installation | EventCollection | True | True |
| CCRReplicationServiceClusterMonitorStartE | CCRReplicationServiceClusterMonitorStartE_2_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___All_Servers_Installation | EventCollection | True | True |
| CCRReplicationServiceEngineSyncEndE | CCRReplicationServiceEngineSyncEndE_2_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___All_Servers_Installation | EventCollection | True | True |
| CCRReplicationServiceEngineSyncEngineReplicationFailedE | CCRReplicationServiceEngineSyncEngineReplicationFailedE_2_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___All_Servers_Installation | EventCollection | True | True |
| CCRReplicationServiceEngineSyncEngineReplicationSkippedNoActiveNodeE | CCRReplicationServiceEngineSyncEngineReplicationSkippedNoActiveNodeE_2_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___All_Servers_Installation | EventCollection | True | True |
| CCRReplicationServiceEngineSyncEngineReplicationSkippedNoSourceE | CCRReplicationServiceEngineSyncEngineReplicationSkippedNoSourceE_2_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___All_Servers_Installation | EventCollection | True | True |
| CCRReplicationServiceEngineSyncEngineReplicationSkippedNoUpdateNeededE | CCRReplicationServiceEngineSyncEngineReplicationSkippedNoUpdateNeededE_2_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___All_Servers_Installation | EventCollection | True | False |
| CCRReplicationServiceEngineSyncEngineReplicationSucceededE | CCRReplicationServiceEngineSyncEngineReplicationSucceededE_2_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___All_Servers_Installation | EventCollection | True | False |
| CCRReplicationServiceEngineSyncErrorE | CCRReplicationServiceEngineSyncErrorE_2_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___All_Servers_Installation | EventCollection | True | True |
| CCRReplicationServiceEngineSyncForefrontRunOrEngineUpdateLockErrorE | CCRReplicationServiceEngineSyncForefrontRunOrEngineUpdateLockErrorE_2_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___All_Servers_Installation | EventCollection | True | True |
| CCRReplicationServiceEngineSyncForefrontRunOrEngineUpdateLockTimeoutE | CCRReplicationServiceEngineSyncForefrontRunOrEngineUpdateLockTimeoutE_2_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___All_Servers_Installation | EventCollection | True | True |
| CCRReplicationServiceEngineSyncStartE | CCRReplicationServiceEngineSyncStartE_2_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___All_Servers_Installation | EventCollection | True | True |
| CCRReplicationServiceFileSyncEndE | CCRReplicationServiceFileSyncEndE_2_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___All_Servers_Installation | EventCollection | True | True |
| CCRReplicationServiceFileSyncErrorE | CCRReplicationServiceFileSyncErrorE_2_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___All_Servers_Installation | EventCollection | True | True |
| CCRReplicationServiceFileSyncFileReplicationFailedE | CCRReplicationServiceFileSyncFileReplicationFailedE_2_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___All_Servers_Installation | EventCollection | True | True |
| CCRReplicationServiceFileSyncFileReplicationSkippedE | CCRReplicationServiceFileSyncFileReplicationSkippedE_2_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___All_Servers_Installation | EventCollection | True | False |
| CCRReplicationServiceFileSyncFileReplicationSkippedNoActiveNodeE | CCRReplicationServiceFileSyncFileReplicationSkippedNoActiveNodeE_2_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___All_Servers_Installation | EventCollection | True | True |
| CCRReplicationServiceFileSyncFileReplicationSkippedNotNewerE | CCRReplicationServiceFileSyncFileReplicationSkippedNotNewerE_2_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___All_Servers_Installation | EventCollection | True | False |
| CCRReplicationServiceFileSyncFileReplicationSucceededE | CCRReplicationServiceFileSyncFileReplicationSucceededE_2_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___All_Servers_Installation | EventCollection | True | False |
| CCRReplicationServiceFileSyncForceInitialSyncE | CCRReplicationServiceFileSyncForceInitialSyncE_2_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___All_Servers_Installation | EventCollection | True | True |
| CCRReplicationServiceFileSyncNoForefrontRunLockE | CCRReplicationServiceFileSyncNoForefrontRunLockE_2_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___All_Servers_Installation | EventCollection | True | True |
| CCRReplicationServiceFileSyncPersistentBackupFailedE | CCRReplicationServiceFileSyncPersistentBackupFailedE_2_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___All_Servers_Installation | EventCollection | True | True |
| CCRReplicationServiceFileSyncPersistentBackupSkippedFileNotFoundE | CCRReplicationServiceFileSyncPersistentBackupSkippedFileNotFoundE_2_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___All_Servers_Installation | EventCollection | True | True |
| CCRReplicationServiceFileSyncPersistentBackupSucceededE | CCRReplicationServiceFileSyncPersistentBackupSucceededE_2_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___All_Servers_Installation | EventCollection | True | True |
| CCRReplicationServiceFileSyncPruningFailedE | CCRReplicationServiceFileSyncPruningFailedE_2_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___All_Servers_Installation | EventCollection | True | True |
| CCRReplicationServiceFileSyncPruningSucceededE | CCRReplicationServiceFileSyncPruningSucceededE_2_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___All_Servers_Installation | EventCollection | True | True |
| CCRReplicationServiceFileSyncSeedingCompleteE | CCRReplicationServiceFileSyncSeedingCompleteE_2_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___All_Servers_Installation | EventCollection | True | True |
| CCRReplicationServiceFileSyncSeedingFailedE | CCRReplicationServiceFileSyncSeedingFailedE_2_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___All_Servers_Installation | EventCollection | True | True |
| CCRReplicationServiceFileSyncStartE | CCRReplicationServiceFileSyncStartE_2_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___All_Servers_Installation | EventCollection | True | True |
| CCRReplicationServiceGetActiveNodeFailureE | CCRReplicationServiceGetActiveNodeFailureE_2_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___All_Servers_Installation | EventCollection | True | True |
| CCRReplicationServiceInitialNodeStateActiveE | CCRReplicationServiceInitialNodeStateActiveE_2_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___All_Servers_Installation | EventCollection | True | True |
| CCRReplicationServiceInitialNodeStatePassiveE | CCRReplicationServiceInitialNodeStatePassiveE_2_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___All_Servers_Installation | EventCollection | True | True |
| CCRReplicationServiceMaxBackupAgeMin2E | CCRReplicationServiceMaxBackupAgeMin2E_2_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___All_Servers_Installation | EventCollection | True | True |
| CCRReplicationServiceMaxBackupAgeMinE | CCRReplicationServiceMaxBackupAgeMinE_2_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___All_Servers_Installation | EventCollection | True | True |
| CCRReplicationServiceMaxBackupsMin2E | CCRReplicationServiceMaxBackupsMin2E_2_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___All_Servers_Installation | EventCollection | True | True |
| CCRReplicationServiceMaxBackupsMinE | CCRReplicationServiceMaxBackupsMinE_2_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___All_Servers_Installation | EventCollection | True | True |
| CCRReplicationServiceMinBackupAgeMinE | CCRReplicationServiceMinBackupAgeMinE_2_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___All_Servers_Installation | EventCollection | True | True |
| CCRReplicationServiceMinBackupsMinE | CCRReplicationServiceMinBackupsMinE_2_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___All_Servers_Installation | EventCollection | True | True |
| CCRReplicationServicePausedE | CCRReplicationServicePausedE_2_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___All_Servers_Installation | EventCollection | True | True |
| CCRReplicationServiceResumedE | CCRReplicationServiceResumedE_2_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___All_Servers_Installation | EventCollection | True | True |
| CCRReplicationServiceStartedE | CCRReplicationServiceStartedE_2_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___All_Servers_Installation | EventCollection | True | True |
| CCRReplicationServiceStoppedE | CCRReplicationServiceStoppedE_2_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___All_Servers_Installation | EventCollection | True | True |
| CCRReplicationServiceTransitionFailureE | CCRReplicationServiceTransitionFailureE_2_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___All_Servers_Installation | EventCollection | True | True |
| CCRServiceConfigErrorE | CCRServiceConfigErrorE_2_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___All_Servers_Installation | EventCollection | True | True |
| CCRServiceErrorE | CCRServiceErrorE_2_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___All_Servers_Installation | EventCollection | True | True |
| CCRServiceNoConfigE | CCRServiceNoConfigE_2_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___All_Servers_Installation | EventCollection | True | True |
| CCRServiceServiceErrorE | CCRServiceServiceErrorE_2_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___All_Servers_Installation | EventCollection | True | True |
| CCRServiceUnknowErrorE | CCRServiceUnknowErrorE_2_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___All_Servers_Installation | EventCollection | True | True |
| EnginesOutOfDateE | EnginesOutOfDateE_2_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___All_Servers_Installation | EventCollection | True | True |
| EnginesOutOfDateW | EnginesOutOfDateW_2_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___All_Servers_Installation | EventCollection | True | True |
| EngineUpdatesE | EngineUpdatesE_2_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___All_Servers_Installation | EventCollection | True | True |
| EngineUpdatesW | EngineUpdatesW_2_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___All_Servers_Installation | EventCollection | True | True |
| ForefrontServiceDiscovery | ForefrontServiceDiscovery_2_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___All_Servers_Installation | EventCollection | True | False |
| LicenseStateE | LicenseStateE_2_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___All_Servers_Installation | EventCollection | True | True |
| LicenseStateW | LicenseStateW_2_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___All_Servers_Installation | EventCollection | True | True |
| MailboxConnected | MailboxConnected_3_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Hub_Transport__Mailbox__Public_Folder_Installation | EventCollection | True | True |
| MailboxConnected | MailboxConnected_5_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Mailbox__Public_Folder_Installation | EventCollection | True | True |
| RealtimeEnginesInitialized | RealTimeEnginesIntialized_3_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Hub_Transport__Mailbox__Public_Folder_Installation | EventCollection | True | True |
| RealtimeEnginesInitialized | RealTimeEnginesIntialized_5_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Mailbox__Public_Folder_Installation | EventCollection | True | True |
| RealtimeScanJobEnabledE | RealtimeScanJobEnabledE_3_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Hub_Transport__Mailbox__Public_Folder_Installation | EventCollection | True | True |
| RealtimeScanJobEnabledE | RealtimeScanJobEnabledE_5_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Mailbox__Public_Folder_Installation | EventCollection | True | True |
| RealtimeScanJobEnabledW | RealTimeScanJobEnabledW_3_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Hub_Transport__Mailbox__Public_Folder_Installation | EventCollection | True | True |
| RealtimeScanJobEnabledW | RealTimeScanJobEnabledW_5_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Mailbox__Public_Folder_Installation | EventCollection | True | True |
| RealtimeScanProcessStateE | RealtimeScanProcessStateE_3_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Hub_Transport__Mailbox__Public_Folder_Installation | EventCollection | True | True |
| RealtimeScanProcessStateE | RealtimeScanProcessStateE_5_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Mailbox__Public_Folder_Installation | EventCollection | True | True |
| RealtimeScanProcessStateW | RealtimeScanProcessStateW_3_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Hub_Transport__Mailbox__Public_Folder_Installation | EventCollection | True | True |
| RealtimeScanProcessStateW | RealtimeScanProcessStateW_5_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Mailbox__Public_Folder_Installation | EventCollection | True | True |
| RollbackFail | RollbackFail_2_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___All_Servers_Installation | EventCollection | True | True |
| RollbackSuccess | RollbackSuccess_2_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___All_Servers_Installation | EventCollection | True | False |
| ScanManualCountAttachmentClean | ScanManualCountAttachmentClean_3_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Hub_Transport__Mailbox__Public_Folder_Installation | PerformanceCollection | True | False |
| ScanManualCountAttachmentClean | ScanManualCountAttachmentClean_5_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Mailbox__Public_Folder_Installation | PerformanceCollection | True | False |
| ScanManualCountAttachmentDetect | ScanManualCountAttachmentDetect_3_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Hub_Transport__Mailbox__Public_Folder_Installation | PerformanceCollection | True | False |
| ScanManualCountAttachmentDetect | ScanManualCountAttachmentDetect_5_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Mailbox__Public_Folder_Installation | PerformanceCollection | True | False |
| ScanManualCountAttachmentRemove | ScanManualCountAttachmentRemove_3_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Hub_Transport__Mailbox__Public_Folder_Installation | PerformanceCollection | True | False |
| ScanManualCountAttachmentRemove | ScanManualCountAttachmentRemove_5_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Mailbox__Public_Folder_Installation | PerformanceCollection | True | False |
| ScanManualCountAttachmentScan | ScanManualCountAttachmentScan_3_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Hub_Transport__Mailbox__Public_Folder_Installation | PerformanceCollection | True | False |
| ScanManualCountAttachmentScan | ScanManualCountAttachmentScan_5_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Mailbox__Public_Folder_Installation | PerformanceCollection | True | False |
| ScanManualCountMessageDetect | ScanManualCountMessageDetect_3_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Hub_Transport__Mailbox__Public_Folder_Installation | PerformanceCollection | True | False |
| ScanManualCountMessageDetect | ScanManualCountMessageDetect_5_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Mailbox__Public_Folder_Installation | PerformanceCollection | True | False |
| ScanManualCountMessagePurge | ScanManualCountMessagePurge_3_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Hub_Transport__Mailbox__Public_Folder_Installation | PerformanceCollection | True | False |
| ScanManualCountMessagePurge | ScanManualCountMessagePurge_5_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Mailbox__Public_Folder_Installation | PerformanceCollection | True | False |
| ScanManualCountMessageScan | ScanManualCountMessageScan_3_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Hub_Transport__Mailbox__Public_Folder_Installation | PerformanceCollection | True | False |
| ScanManualCountMessageScan | ScanManualCountMessageScan_5_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Mailbox__Public_Folder_Installation | PerformanceCollection | True | False |
| ScanManualCountMessageTag | ScanManualCountMessageTag_3_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Hub_Transport__Mailbox__Public_Folder_Installation | PerformanceCollection | True | False |
| ScanManualCountMessageTag | ScanManualCountMessageTag_5_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Mailbox__Public_Folder_Installation | PerformanceCollection | True | False |
| ScanManualEngineMapE | ScanManualEngineMapE_3_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Hub_Transport__Mailbox__Public_Folder_Installation | EventCollection | True | True |
| ScanManualEngineMapE | ScanManualEngineMapE_5_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Mailbox__Public_Folder_Installation | EventCollection | True | True |
| ScanManualFailedE | ScanManualFailedE_3_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Hub_Transport__Mailbox__Public_Folder_Installation | EventCollection | True | True |
| ScanManualFailedE | ScanManualFailedE_5_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Mailbox__Public_Folder_Installation | EventCollection | True | True |
| ScanManualProblemE | ScanManualProblemE_3_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Hub_Transport__Mailbox__Public_Folder_Installation | EventCollection | True | True |
| ScanManualProblemE | ScanManualProblemE_5_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Mailbox__Public_Folder_Installation | EventCollection | True | True |
| ScanManualRateAttachmentScan | ScanManualRateAttachmentScan_3_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Hub_Transport__Mailbox__Public_Folder_Installation | PerformanceCollection | True | False |
| ScanManualRateAttachmentScan | ScanManualRateAttachmentScan_5_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Mailbox__Public_Folder_Installation | PerformanceCollection | True | False |
| ScanManualStartedE | ScanManualStartedE_3_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Hub_Transport__Mailbox__Public_Folder_Installation | EventCollection | True | False |
| ScanManualStartedE | ScanManualStartedE_5_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Mailbox__Public_Folder_Installation | EventCollection | True | False |
| ScanManualStoppedE | ScanManualStoppedE_3_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Hub_Transport__Mailbox__Public_Folder_Installation | EventCollection | True | False |
| ScanManualStoppedE | ScanManualStoppedE_5_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Mailbox__Public_Folder_Installation | EventCollection | True | False |
| ScanningStatistics | ScanningStatistics_2_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___All_Servers_Installation | EventCollection | True | True |
| ScanRealtimeAbortE | ScanRealtimeAbortE_3_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Hub_Transport__Mailbox__Public_Folder_Installation | Custom | True | True |
| ScanRealtimeAbortE | ScanRealtimeAbortE_5_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Mailbox__Public_Folder_Installation | Custom | True | True |
| ScanRealtimeCountAttachmentClean | ScanRealtimeCountAttachmentClean_3_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Hub_Transport__Mailbox__Public_Folder_Installation | PerformanceCollection | True | False |
| ScanRealtimeCountAttachmentClean | ScanRealtimeCountAttachmentClean_5_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Mailbox__Public_Folder_Installation | PerformanceCollection | True | False |
| ScanRealtimeCountAttachmentDetect | ScanRealtimeCountAttachmentDetect_3_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Hub_Transport__Mailbox__Public_Folder_Installation | PerformanceCollection | True | False |
| ScanRealtimeCountAttachmentDetect | ScanRealtimeCountAttachmentDetect_5_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Mailbox__Public_Folder_Installation | PerformanceCollection | True | False |
| ScanRealtimeCountAttachmentRemove | ScanRealtimeCountAttachmentRemove_3_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Hub_Transport__Mailbox__Public_Folder_Installation | PerformanceCollection | True | False |
| ScanRealtimeCountAttachmentRemove | ScanRealtimeCountAttachmentRemove_5_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Mailbox__Public_Folder_Installation | PerformanceCollection | True | False |
| ScanRealtimeCountAttachmentScan | ScanRealtimeCountAttachmentScan_3_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Hub_Transport__Mailbox__Public_Folder_Installation | PerformanceCollection | True | False |
| ScanRealtimeCountAttachmentScan | ScanRealtimeCountAttachmentScan_5_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Mailbox__Public_Folder_Installation | PerformanceCollection | True | False |
| ScanRealtimeCountMessageDetect | ScanRealtimeCountMessageDetect_3_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Hub_Transport__Mailbox__Public_Folder_Installation | PerformanceCollection | True | False |
| ScanRealtimeCountMessageDetect | ScanRealtimeCountMessageDetect_5_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Mailbox__Public_Folder_Installation | PerformanceCollection | True | False |
| ScanRealtimeCountMessagePurge | ScanRealtimeCountMessagePurge_3_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Hub_Transport__Mailbox__Public_Folder_Installation | PerformanceCollection | True | False |
| ScanRealtimeCountMessagePurge | ScanRealtimeCountMessagePurge_5_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Mailbox__Public_Folder_Installation | PerformanceCollection | True | False |
| ScanRealtimeCountMessageScan | ScanRealtimeCountMessageScan_3_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Hub_Transport__Mailbox__Public_Folder_Installation | PerformanceCollection | True | False |
| ScanRealtimeCountMessageScan | ScanRealtimeCountMessageScan_5_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Mailbox__Public_Folder_Installation | PerformanceCollection | True | False |
| ScanRealtimeCountMessageTag | ScanRealtimeCountMessageTag_3_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Hub_Transport__Mailbox__Public_Folder_Installation | PerformanceCollection | True | False |
| ScanRealtimeCountMessageTag | ScanRealtimeCountMessageTag_5_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Mailbox__Public_Folder_Installation | PerformanceCollection | True | False |
| ScanRealtimeEngineMapE | ScanRealtimeEngineMapE_3_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Hub_Transport__Mailbox__Public_Folder_Installation | EventCollection | True | True |
| ScanRealtimeEngineMapE | ScanRealtimeEngineMapE_5_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Mailbox__Public_Folder_Installation | EventCollection | True | True |
| ScanRealtimeProcessUsage | ScanRealtimeProcessUsage_3_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Hub_Transport__Mailbox__Public_Folder_Installation | PerformanceCollection | True | False |
| ScanRealtimeProcessUsage | ScanRealtimeProcessUsage_5_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Mailbox__Public_Folder_Installation | PerformanceCollection | True | False |
| ScanRealtimeRateAttachmentScan | ScanRealtimeRateAttachmentScan_3_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Hub_Transport__Mailbox__Public_Folder_Installation | PerformanceCollection | True | False |
| ScanRealtimeRateAttachmentScan | ScanRealtimeRateAttachmentScan_5_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Mailbox__Public_Folder_Installation | PerformanceCollection | True | False |
| ScanRealtimeTimeoutE | ScanRealtimeTimeoutE_3_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Hub_Transport__Mailbox__Public_Folder_Installation | EventCollection | True | True |
| ScanRealtimeTimeoutE | ScanRealtimeTimeoutE_5_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Mailbox__Public_Folder_Installation | EventCollection | True | True |
| ScanTransportAbortE | ScanTransportAbortE_1_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Edge_Transport_Installation | Custom | True | True |
| ScanTransportAbortE | ScanTransportAbortE_3_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Hub_Transport__Mailbox__Public_Folder_Installation | Custom | True | True |
| ScanTransportAbortE | ScanTransportAbortE_4_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Hub_Transport_Installation | Custom | True | True |
| ScanTransportCountAttachmentClean | ScanTransportCountAttachmentClean_1_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Edge_Transport_Installation | PerformanceCollection | True | False |
| ScanTransportCountAttachmentClean | ScanTransportCountAttachmentClean_3_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Hub_Transport__Mailbox__Public_Folder_Installation | PerformanceCollection | True | False |
| ScanTransportCountAttachmentClean | ScanTransportCountAttachmentClean_4_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Hub_Transport_Installation | PerformanceCollection | True | False |
| ScanTransportCountAttachmentDetect | ScanTransportCountAttachmentDetect_1_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Edge_Transport_Installation | PerformanceCollection | True | False |
| ScanTransportCountAttachmentDetect | ScanTransportCountAttachmentDetect_3_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Hub_Transport__Mailbox__Public_Folder_Installation | PerformanceCollection | True | False |
| ScanTransportCountAttachmentDetect | ScanTransportCountAttachmentDetect_4_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Hub_Transport_Installation | PerformanceCollection | True | False |
| ScanTransportCountAttachmentRemove | ScanTransportCountAttachmentRemove_1_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Edge_Transport_Installation | PerformanceCollection | True | False |
| ScanTransportCountAttachmentRemove | ScanTransportCountAttachmentRemove_3_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Hub_Transport__Mailbox__Public_Folder_Installation | PerformanceCollection | True | False |
| ScanTransportCountAttachmentRemove | ScanTransportCountAttachmentRemove_4_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Hub_Transport_Installation | PerformanceCollection | True | False |
| ScanTransportCountAttachmentScan | ScanTransportCountAttachmentScan_1_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Edge_Transport_Installation | PerformanceCollection | True | False |
| ScanTransportCountAttachmentScan | ScanTransportCountAttachmentScan_3_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Hub_Transport__Mailbox__Public_Folder_Installation | PerformanceCollection | True | False |
| ScanTransportCountAttachmentScan | ScanTransportCountAttachmentScan_4_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Hub_Transport_Installation | PerformanceCollection | True | False |
| ScanTransportCountMessageDetect | ScanTransportCountMessageDetect_1_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Edge_Transport_Installation | PerformanceCollection | True | False |
| ScanTransportCountMessageDetect | ScanTransportCountMessageDetect_3_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Hub_Transport__Mailbox__Public_Folder_Installation | PerformanceCollection | True | False |
| ScanTransportCountMessageDetect | ScanTransportCountMessageDetect_4_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Hub_Transport_Installation | PerformanceCollection | True | False |
| ScanTransportCountMessagePurge | ScanTransportCountMessagePurge_1_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Edge_Transport_Installation | PerformanceCollection | True | False |
| ScanTransportCountMessagePurge | ScanTransportCountMessagePurge_3_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Hub_Transport__Mailbox__Public_Folder_Installation | PerformanceCollection | True | False |
| ScanTransportCountMessagePurge | ScanTransportCountMessagePurge_4_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Hub_Transport_Installation | PerformanceCollection | True | False |
| ScanTransportCountMessageScan | ScanTransportCountMessageScan_1_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Edge_Transport_Installation | PerformanceCollection | True | False |
| ScanTransportCountMessageScan | ScanTransportCountMessageScan_3_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Hub_Transport__Mailbox__Public_Folder_Installation | PerformanceCollection | True | False |
| ScanTransportCountMessageScan | ScanTransportCountMessageScan_4_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Hub_Transport_Installation | PerformanceCollection | True | False |
| ScanTransportCountMessageTag | ScanTransportCountMessageTag_1_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Edge_Transport_Installation | PerformanceCollection | True | False |
| ScanTransportCountMessageTag | ScanTransportCountMessageTag_3_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Hub_Transport__Mailbox__Public_Folder_Installation | PerformanceCollection | True | False |
| ScanTransportCountMessageTag | ScanTransportCountMessageTag_4_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Hub_Transport_Installation | PerformanceCollection | True | False |
| ScanTransportEngineMapE | ScanTransportEngineMapE_1_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Edge_Transport_Installation | EventCollection | True | True |
| ScanTransportEngineMapE | ScanTransportEngineMapE_3_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Hub_Transport__Mailbox__Public_Folder_Installation | EventCollection | True | True |
| ScanTransportEngineMapE | ScanTransportEngineMapE_4_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Hub_Transport_Installation | EventCollection | True | True |
| ScanTransportRateAttachmentScan | ScanTransportRateAttachmentScan_1_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Edge_Transport_Installation | PerformanceCollection | True | False |
| ScanTransportRateAttachmentScan | ScanTransportRateAttachmentScan_3_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Hub_Transport__Mailbox__Public_Folder_Installation | PerformanceCollection | True | False |
| ScanTransportRateAttachmentScan | ScanTransportRateAttachmentScan_4_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Hub_Transport_Installation | PerformanceCollection | True | False |
| ScanTransportTimeoutE | ScanTransportTimeoutE_1_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Edge_Transport_Installation | EventCollection | True | True |
| ScanTransportTimeoutE | ScanTransportTimeoutE_3_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Hub_Transport__Mailbox__Public_Folder_Installation | EventCollection | True | True |
| ScanTransportTimeoutE | ScanTransportTimeoutE_4_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Hub_Transport_Installation | EventCollection | True | True |
| SelectedEngineUpdates | SelectedEngineUpdates_2_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___All_Servers_Installation | EventCollection | True | True |
| ServicesExchangeStoreStartFailE | ServicesExchangeStoreStartFailE_3_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Hub_Transport__Mailbox__Public_Folder_Installation | EventCollection | True | True |
| ServicesExchangeStoreStartFailE | ServicesExchangeStoreStartFailE_5_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Mailbox__Public_Folder_Installation | EventCollection | True | True |
| ServicesExchangeStoreTerminateE | ServicesExchangeStoreTerminateE_3_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Hub_Transport__Mailbox__Public_Folder_Installation | EventCollection | True | True |
| ServicesExchangeStoreTerminateE | ServicesExchangeStoreTerminateE_5_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Mailbox__Public_Folder_Installation | EventCollection | True | True |
| ServicesForefrontIMCStartFail | ServicesForefrontIMCStartFail_1_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Edge_Transport_Installation | EventCollection | True | True |
| ServicesForefrontIMCStartFail | ServicesForefrontIMCStartFail_3_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Hub_Transport__Mailbox__Public_Folder_Installation | EventCollection | True | True |
| ServicesForefrontIMCStartFail | ServicesForefrontIMCStartFail_4_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Hub_Transport_Installation | EventCollection | True | True |
| ServicesForefrontIMCStart | ServicesForefrontIMCStart_1_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Edge_Transport_Installation | EventCollection | True | False |
| ServicesForefrontIMCStart | ServicesForefrontIMCStart_3_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Hub_Transport__Mailbox__Public_Folder_Installation | EventCollection | True | False |
| ServicesForefrontIMCStart | ServicesForefrontIMCStart_4_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Hub_Transport_Installation | EventCollection | True | False |
| ServicesForefrontMonitor StateMonitor | ServicesForefrontMonitor_StateMonitor_2_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___All_Servers_Installation | EventCollection | True | True |
| ServicesForefrontService StateMonitor | ServicesForefrontService_StateMonitor_2_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___All_Servers_Installation | EventCollection | True | True |
| ServicesStoreFailE | ServicesStoreFailE_3_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Hub_Transport__Mailbox__Public_Folder_Installation | EventCollection | True | True |
| ServicesStoreFailE | ServicesStoreFailE_5_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Mailbox__Public_Folder_Installation | EventCollection | True | True |
| ServicesStoreStartE | ServicesStoreStartE_3_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Hub_Transport__Mailbox__Public_Folder_Installation | EventCollection | True | False |
| ServicesStoreStartE | ServicesStoreStartE_5_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Mailbox__Public_Folder_Installation | EventCollection | True | False |
| ServicesStoreStopE | ServicesStoreStopE_3_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Hub_Transport__Mailbox__Public_Folder_Installation | EventCollection | True | False |
| ServicesStoreStopE | ServicesStoreStopE_5_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Mailbox__Public_Folder_Installation | EventCollection | True | False |
| ServicesTransportStartFail | ServicesTransportStartFail_1_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Edge_Transport_Installation | EventCollection | True | True |
| ServicesTransportStartFail | ServicesTransportStartFail_3_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Hub_Transport__Mailbox__Public_Folder_Installation | EventCollection | True | True |
| ServicesTransportStartFail | ServicesTransportStartFail_4_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Hub_Transport_Installation | EventCollection | True | True |
| ServicesTransportStart | ServicesTransportStart_1_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Edge_Transport_Installation | EventCollection | True | False |
| ServicesTransportStart | ServicesTransportStart_3_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Hub_Transport__Mailbox__Public_Folder_Installation | EventCollection | True | False |
| ServicesTransportStart | ServicesTransportStart_4_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Hub_Transport_Installation | EventCollection | True | False |
| ServicesTransportStop | ServicesTransportStop_1_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Edge_Transport_Installation | EventCollection | True | False |
| ServicesTransportStop | ServicesTransportStop_3_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Hub_Transport__Mailbox__Public_Folder_Installation | EventCollection | True | False |
| ServicesTransportStop | ServicesTransportStop_4_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Hub_Transport_Installation | EventCollection | True | False |
| ServiceTerminate | ServiceTerminate_1_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Edge_Transport_Installation | EventCollection | True | True |
| ServiceTerminate | ServiceTerminate_3_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Hub_Transport__Mailbox__Public_Folder_Installation | EventCollection | True | True |
| ServiceTerminate | ServiceTerminate_4_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Hub_Transport_Installation | EventCollection | True | True |
| TransportConnected | TransportConnected_1_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Edge_Transport_Installation | EventCollection | True | True |
| TransportConnected | TransportConnected_3_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Hub_Transport__Mailbox__Public_Folder_Installation | EventCollection | True | True |
| TransportConnected | TransportConnected_4_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Hub_Transport_Installation | EventCollection | True | True |
| TransportEnginesInitialized | TransportEnginesInitialized_1_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Edge_Transport_Installation | EventCollection | True | True |
| TransportEnginesInitialized | TransportEnginesInitialized_3_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Hub_Transport__Mailbox__Public_Folder_Installation | EventCollection | True | True |
| TransportEnginesInitialized | TransportEnginesInitialized_4_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Hub_Transport_Installation | EventCollection | True | True |
| TransportScanJobEnabledE | TransportScanJobEnabledE_1_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Edge_Transport_Installation | EventCollection | True | True |
| TransportScanJobEnabledE | TransportScanJobEnabledE_3_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Hub_Transport__Mailbox__Public_Folder_Installation | EventCollection | True | True |
| TransportScanJobEnabledE | TransportScanJobEnabledE_4_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Hub_Transport_Installation | EventCollection | True | True |
| TransportScanJobEnabledW | TransportScanJobEnabledW_1_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Edge_Transport_Installation | EventCollection | True | True |
| TransportScanJobEnabledW | TransportScanJobEnabledW_3_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Hub_Transport__Mailbox__Public_Folder_Installation | EventCollection | True | True |
| TransportScanJobEnabledW | TransportScanJobEnabledW_4_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Hub_Transport_Installation | EventCollection | True | True |
| TransportScanProcessStateE | TransportScanProcessStateE_1_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Edge_Transport_Installation | EventCollection | True | True |
| TransportScanProcessStateE | TransportScanProcessStateE_3_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Hub_Transport__Mailbox__Public_Folder_Installation | EventCollection | True | True |
| TransportScanProcessStateE | TransportScanProcessStateE_4_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Hub_Transport_Installation | EventCollection | True | True |
| TransportScanProcessStateW | TransportScanProcessStateW_1_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Edge_Transport_Installation | EventCollection | True | True |
| TransportScanProcessStateW | TransportScanProcessStateW_3_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Hub_Transport__Mailbox__Public_Folder_Installation | EventCollection | True | True |
| TransportScanProcessStateW | TransportScanProcessStateW_4_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Hub_Transport_Installation | EventCollection | True | True |
| UpdateFailGeneric | UpdateFailGeneric_2_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___All_Servers_Installation | EventCollection | True | True |
| UpdateSuccess | UpdateSuccess_2_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___All_Servers_Installation | Custom | True | False |