适用于 Microsoft 高级威胁分析 1.7 的管理包
这是 Advanced Threat Analytics 库管理包。此管理包包含用于 ATA 的所有类、视图、监视器和发现。
| DisplayName | ID | Base Class | Abstract | Hosted | Singleton | Group | Extension | Accessibility | |
|---|---|---|---|---|---|---|---|---|---|
 | Advanced Threat Analytics 1.7 中心 | Microsoft.AdvancedThreatAnalytics.1_7.Center | Microsoft.Windows.ComputerRole | False | True | False | False | False | Public |
 | Advanced Threat Analytics 1.7 网关容器 | Microsoft.AdvancedThreatAnalytics.1_7.Container.Gateway | Microsoft.AdvancedThreatAnalytics.ServiceComponent | False | False | False | False | False | Public |
 | Advanced Threat Analytics 1.7 数据库 | Microsoft.AdvancedThreatAnalytics.1_7.Database | System.Database | False | True | False | False | False | Public |
 | Advanced Threat Analytics 1.7 网关 | Microsoft.AdvancedThreatAnalytics.1_7.Gateway | Microsoft.Windows.ComputerRole | True | True | False | False | False | Public |
 | Advanced Threat Analytics 1.7 轻型网关 | Microsoft.AdvancedThreatAnalytics.1_7.Gateway.LightWeight | Microsoft.AdvancedThreatAnalytics.1_7.Gateway | False | True | False | False | False | Public |
 | Advanced Threat Analytics 1.7 独立网关 | Microsoft.AdvancedThreatAnalytics.1_7.Gateway.Standalone | Microsoft.AdvancedThreatAnalytics.1_7.Gateway | False | True | False | False | False | Public |
 | Advanced Threat Analytics 1.7 实例组 | Microsoft.AdvancedThreatAnalytics.1_7.InstancesGroup | Microsoft.SystemCenter.InstanceGroup | False | False | True | True | False | Public |
 | Advanced Threat Analytics 1.7 种子类 | Microsoft.AdvancedThreatAnalytics.1_7.Seed | Microsoft.Windows.LocalApplication | False | True | False | False | False | Public |
 | Advanced Threat Analytics 1.7 服务器组 | Microsoft.AdvancedThreatAnalytics.1_7.ServersGroup | Microsoft.SystemCenter.ComputerGroup | False | False | True | True | False | Public |
 | Advanced Threat Analytics 1.7 服务 | Microsoft.AdvancedThreatAnalytics.1_7.Service | Microsoft.AdvancedThreatAnalytics.ServiceComponent | False | False | False | False | False | Public |
| Advanced Threat Analytics 1.7 服务组 | Microsoft.AdvancedThreatAnalytics.1_7.ServiceGroup | Microsoft.SystemCenter.InstanceGroup | False | False | True | True | False | Public |
| DisplayName | ID | Source | Target | Accessibility | Abstract | |
|---|---|---|---|---|---|---|
 | Microsoft Advanced Threat Analytics 1.7 中心承载 1.7 数据库 | Microsoft.AdvancedThreatAnalytics.1_7.Center.hosts.Microsoft.AdvancedThreatAnalytics.1_7.Database | Microsoft.AdvancedThreatAnalytics.1_7.Center | Microsoft.AdvancedThreatAnalytics.1_7.Database | Public | False |
| Advanced Threat Analytics 1.7 容器(网关)包含 1.7 轻型网关 | Microsoft.AdvancedThreatAnalytics.1_7.Container.Gateway.contains.Microsoft.AdvancedThreatAnalytics.1_7.Gateway.LightWeight | Microsoft.AdvancedThreatAnalytics.1_7.Container.Gateway | Microsoft.AdvancedThreatAnalytics.1_7.Gateway.LightWeight | Public | False |
| Advanced Threat Analytics 1.7 容器(网关)包含 1.7 独立网关 | Microsoft.AdvancedThreatAnalytics.1_7.Container.Gateway.contains.Microsoft.AdvancedThreatAnalytics.1_7.Gateway.Standalone | Microsoft.AdvancedThreatAnalytics.1_7.Container.Gateway | Microsoft.AdvancedThreatAnalytics.1_7.Gateway.Standalone | Public | False |
| Advanced Threat Analytics 1.7 服务包含 1.7 中心 | Microsoft.AdvancedThreatAnalytics.1_7.Service.contains.Microsoft.AdvancedThreatAnalytics.1_7.Center | Microsoft.AdvancedThreatAnalytics.1_7.Service | Microsoft.AdvancedThreatAnalytics.1_7.Center | Public | False |
| Advanced Threat Analytics 1.7 服务包含 1.7 容器(网关) | Microsoft.AdvancedThreatAnalytics.1_7.Service.contains.Microsoft.AdvancedThreatAnalytics.1_7.Container.Gateway | Microsoft.AdvancedThreatAnalytics.1_7.Service | Microsoft.AdvancedThreatAnalytics.1_7.Container.Gateway | Public | False |
| Advanced Threat Analytics 容器包含 1.7 服务 | Microsoft.AdvancedThreatAnalytics.Container.contains.Microsoft.AdvancedThreatAnalytics.1_7.Service | Microsoft.AdvancedThreatAnalytics.Container | Microsoft.AdvancedThreatAnalytics.1_7.Service | Public | False |
| DisplayName | ID | Isolation | Accessibility | |
|---|---|---|---|---|
 | Advanced Threat Analytics 1.7 中心发现数据源 | Microsoft.AdvancedThreatAnalytics.1_7.Center.Discovery.DataSource | Any | Internal |
| Advanced Threat Analytics 1.7 分发应用程序发现数据源 | Microsoft.AdvancedThreatAnalytics.1_7.DistributedApplication.Discovery.DataSource | Any | Internal |
| Advanced Threat Analytics 1.7 网关发现数据源 | Microsoft.AdvancedThreatAnalytics.1_7.Gateway.Discovery.DataSource | Any | Internal |
| ATA 日志文件提供程序 | Microsoft.AdvancedThreatAnalytics.LogFileProvider | Any | Internal |
| ID | Target | |
|---|---|---|
 | Microsoft.AdvancedThreatAnalytics.1_7.Center.ATAConsole.Task.Category | Microsoft.AdvancedThreatAnalytics.1_7.Center.ATAConsole.Task |
| Microsoft.AdvancedThreatAnalytics.1_7.Center.Icon.Category | Microsoft.AdvancedThreatAnalytics.Center.Icon |
| Microsoft.AdvancedThreatAnalytics.1_7.Center.Small.Icon.Category | Microsoft.AdvancedThreatAnalytics.Center.Small.Icon |
| Microsoft.AdvancedThreatAnalytics.1_7.Container.Gateway.Icon.Category | Microsoft.AdvancedThreatAnalytics.Container.Gateway.Icon |
| Microsoft.AdvancedThreatAnalytics.1_7.Container.Gateway.Small.Icon.Category | Microsoft.AdvancedThreatAnalytics.Container.Gateway.Small.Icon |
| Microsoft.AdvancedThreatAnalytics.1_7.Gateway.Standalone.Icon.Category | Microsoft.AdvancedThreatAnalytics.Gateway.Standalone.Icon |
| Microsoft.AdvancedThreatAnalytics.1_7.Gateway.Standalone.Small.Icon.Category | Microsoft.AdvancedThreatAnalytics.Gateway.Standalone.Small.Icon |
| Microsoft.AdvancedThreatAnalytics.1_7.LightweightGateway.Icon.Category | Microsoft.AdvancedThreatAnalytics.LightweightGateway.Icon |
| Microsoft.AdvancedThreatAnalytics.1_7.LightweightGateway.Small.Icon.Category | Microsoft.AdvancedThreatAnalytics.LightweightGateway.Small.Icon |
| Microsoft.AdvancedThreatAnalytics.1_7.Service.Icon.Category | Microsoft.AdvancedThreatAnalytics.Service.Icon |
| Microsoft.AdvancedThreatAnalytics.1_7.Service.Small.Icon.Category | Microsoft.AdvancedThreatAnalytics.Service.Small.Icon |
| DisplayName | ID | Target | Enabled | |
|---|---|---|---|---|
 | Advanced Threat Analytics 1.7 中心发现 | Microsoft.AdvancedThreatAnalytics.1_7.Center.Discovery | Microsoft.AdvancedThreatAnalytics.1_7.Seed | True |
| Advanced Threat Analytics 1.7 分发应用程序发现 | Microsoft.AdvancedThreatAnalytics.1_7.DistributedApplication.Discovery | Microsoft.SystemCenter.AllManagementServersPool | True |
| Advanced Threat Analytics 1.7 网关发现 | Microsoft.AdvancedThreatAnalytics.1_7.Gateway.Discovery | Microsoft.AdvancedThreatAnalytics.1_7.Seed | True |
| Advanced Threat Analytics 1.7 实例组发现 | Microsoft.AdvancedThreatAnalytics.1_7.InstancesGroup.Discovery | Microsoft.AdvancedThreatAnalytics.1_7.InstancesGroup | True |
| Advanced Threat Analytics 1.7 种子发现 | Microsoft.AdvancedThreatAnalytics.1_7.Seed.Discovery | Microsoft.Windows.Server.OperatingSystem | True |
| Advanced Threat Analytics 1.7 服务器组发现 | Microsoft.AdvancedThreatAnalytics.1_7.ServersGroup.Discovery | Microsoft.AdvancedThreatAnalytics.1_7.ServersGroup | True |
| Advanced Threat Analytics 1.7 服务组发现 | Microsoft.AdvancedThreatAnalytics.1_7.ServiceGroup.Discovery | Microsoft.AdvancedThreatAnalytics.1_7.ServiceGroup | True |
| DisplayName | ID | Target | Algorithm | Source Monitor | Relationship | Category | Enabled | Alert Generate | Accessibility | |
|---|---|---|---|---|---|---|---|---|---|---|
 | 中心可用性汇总监视器 | Microsoft.AdvancedThreatAnalytics.1_7.Center.Availability.RollupMonitor | Microsoft.AdvancedThreatAnalytics.1_7.Center | WorstOf | System.Health.AvailabilityState | Microsoft.AdvancedThreatAnalytics.1_7.Center.hosts.Microsoft.AdvancedThreatAnalytics.1_7.Database | AvailabilityHealth | True | False | Public |
| 中心配置汇总监视器 | Microsoft.AdvancedThreatAnalytics.1_7.Center.Configuration.RollupMonitor | Microsoft.AdvancedThreatAnalytics.1_7.Center | WorstOf | System.Health.ConfigurationState | Microsoft.AdvancedThreatAnalytics.1_7.Center.hosts.Microsoft.AdvancedThreatAnalytics.1_7.Database | ConfigurationHealth | True | False | Public |
| 中心性能汇总监视器 | Microsoft.AdvancedThreatAnalytics.1_7.Center.Performance.RollupMonitor | Microsoft.AdvancedThreatAnalytics.1_7.Center | WorstOf | System.Health.PerformanceState | Microsoft.AdvancedThreatAnalytics.1_7.Center.hosts.Microsoft.AdvancedThreatAnalytics.1_7.Database | PerformanceHealth | True | False | Public |
| 中心安全性汇总监视器 | Microsoft.AdvancedThreatAnalytics.1_7.Center.Security.RollupMonitor | Microsoft.AdvancedThreatAnalytics.1_7.Center | WorstOf | System.Health.SecurityState | Microsoft.AdvancedThreatAnalytics.1_7.Center.hosts.Microsoft.AdvancedThreatAnalytics.1_7.Database | SecurityHealth | True | False | Public |
| 网关(轻型)可用性汇总监视器 | Microsoft.AdvancedThreatAnalytics.1_7.Container.Gateway.LightWeight.Availability.RollupMonitor | Microsoft.AdvancedThreatAnalytics.1_7.Container.Gateway | WorstOf | System.Health.AvailabilityState | Microsoft.AdvancedThreatAnalytics.1_7.Container.Gateway.contains.Microsoft.AdvancedThreatAnalytics.1_7.Gateway.LightWeight | AvailabilityHealth | True | False | Public |
| 网关(轻型)配置汇总监视器 | Microsoft.AdvancedThreatAnalytics.1_7.Container.Gateway.LightWeight.Configuration.RollupMonitor | Microsoft.AdvancedThreatAnalytics.1_7.Container.Gateway | WorstOf | System.Health.ConfigurationState | Microsoft.AdvancedThreatAnalytics.1_7.Container.Gateway.contains.Microsoft.AdvancedThreatAnalytics.1_7.Gateway.LightWeight | ConfigurationHealth | True | False | Public |
| 网关(轻型)性能汇总监视器 | Microsoft.AdvancedThreatAnalytics.1_7.Container.Gateway.LightWeight.Performance.RollupMonitor | Microsoft.AdvancedThreatAnalytics.1_7.Container.Gateway | WorstOf | System.Health.PerformanceState | Microsoft.AdvancedThreatAnalytics.1_7.Container.Gateway.contains.Microsoft.AdvancedThreatAnalytics.1_7.Gateway.LightWeight | PerformanceHealth | True | False | Public |
| 网关(轻型)安全性汇总监视器 | Microsoft.AdvancedThreatAnalytics.1_7.Container.Gateway.LightWeight.Security.RollupMonitor | Microsoft.AdvancedThreatAnalytics.1_7.Container.Gateway | WorstOf | System.Health.SecurityState | Microsoft.AdvancedThreatAnalytics.1_7.Container.Gateway.contains.Microsoft.AdvancedThreatAnalytics.1_7.Gateway.LightWeight | SecurityHealth | True | False | Public |
| 网关(独立)可用性汇总监视器 | Microsoft.AdvancedThreatAnalytics.1_7.Container.Gateway.Standalone.Availability.RollupMonitor | Microsoft.AdvancedThreatAnalytics.1_7.Container.Gateway | WorstOf | System.Health.AvailabilityState | Microsoft.AdvancedThreatAnalytics.1_7.Container.Gateway.contains.Microsoft.AdvancedThreatAnalytics.1_7.Gateway.Standalone | AvailabilityHealth | True | False | Public |
| 网关(独立)配置汇总监视器 | Microsoft.AdvancedThreatAnalytics.1_7.Container.Gateway.Standalone.Configuration.RollupMonitor | Microsoft.AdvancedThreatAnalytics.1_7.Container.Gateway | WorstOf | System.Health.ConfigurationState | Microsoft.AdvancedThreatAnalytics.1_7.Container.Gateway.contains.Microsoft.AdvancedThreatAnalytics.1_7.Gateway.Standalone | ConfigurationHealth | True | False | Public |
| 网关(独立)性能汇总监视器 | Microsoft.AdvancedThreatAnalytics.1_7.Container.Gateway.Standalone.Performance.RollupMonitor | Microsoft.AdvancedThreatAnalytics.1_7.Container.Gateway | WorstOf | System.Health.PerformanceState | Microsoft.AdvancedThreatAnalytics.1_7.Container.Gateway.contains.Microsoft.AdvancedThreatAnalytics.1_7.Gateway.Standalone | PerformanceHealth | True | False | Public |
| 网关(独立)安全性汇总监视器 | Microsoft.AdvancedThreatAnalytics.1_7.Container.Gateway.Standalone.Security.RollupMonitor | Microsoft.AdvancedThreatAnalytics.1_7.Container.Gateway | WorstOf | System.Health.SecurityState | Microsoft.AdvancedThreatAnalytics.1_7.Container.Gateway.contains.Microsoft.AdvancedThreatAnalytics.1_7.Gateway.Standalone | SecurityHealth | True | False | Public |
| 服务(中心)可用性汇总监视器 | Microsoft.AdvancedThreatAnalytics.1_7.Service.Center.Availability.RollupMonitor | Microsoft.AdvancedThreatAnalytics.1_7.Service | WorstOf | System.Health.AvailabilityState | Microsoft.AdvancedThreatAnalytics.1_7.Service.contains.Microsoft.AdvancedThreatAnalytics.1_7.Center | AvailabilityHealth | True | False | Public |
| 服务(中心)配置汇总监视器 | Microsoft.AdvancedThreatAnalytics.1_7.Service.Center.Configuration.RollupMonitor | Microsoft.AdvancedThreatAnalytics.1_7.Service | WorstOf | System.Health.ConfigurationState | Microsoft.AdvancedThreatAnalytics.1_7.Service.contains.Microsoft.AdvancedThreatAnalytics.1_7.Center | ConfigurationHealth | True | False | Public |
| 服务(中心)性能汇总监视器 | Microsoft.AdvancedThreatAnalytics.1_7.Service.Center.Performance.RollupMonitor | Microsoft.AdvancedThreatAnalytics.1_7.Service | WorstOf | System.Health.PerformanceState | Microsoft.AdvancedThreatAnalytics.1_7.Service.contains.Microsoft.AdvancedThreatAnalytics.1_7.Center | PerformanceHealth | True | False | Public |
| 服务(中心)安全性汇总监视器 | Microsoft.AdvancedThreatAnalytics.1_7.Service.Center.Security.RollupMonitor | Microsoft.AdvancedThreatAnalytics.1_7.Service | WorstOf | System.Health.SecurityState | Microsoft.AdvancedThreatAnalytics.1_7.Service.contains.Microsoft.AdvancedThreatAnalytics.1_7.Center | SecurityHealth | True | False | Public |
| 服务(网关)可用性汇总监视器 | Microsoft.AdvancedThreatAnalytics.1_7.Service.Gateway.Availability.RollupMonitor | Microsoft.AdvancedThreatAnalytics.1_7.Service | WorstOf | System.Health.AvailabilityState | Microsoft.AdvancedThreatAnalytics.1_7.Service.contains.Microsoft.AdvancedThreatAnalytics.1_7.Container.Gateway | AvailabilityHealth | True | False | Public |
| 服务(网关)配置汇总监视器 | Microsoft.AdvancedThreatAnalytics.1_7.Service.Gateway.Configuration.RollupMonitor | Microsoft.AdvancedThreatAnalytics.1_7.Service | WorstOf | System.Health.ConfigurationState | Microsoft.AdvancedThreatAnalytics.1_7.Service.contains.Microsoft.AdvancedThreatAnalytics.1_7.Container.Gateway | ConfigurationHealth | True | False | Public |
| 服务(网关)性能汇总监视器 | Microsoft.AdvancedThreatAnalytics.1_7.Service.Gateway.Performance.RollupMonitor | Microsoft.AdvancedThreatAnalytics.1_7.Service | WorstOf | System.Health.PerformanceState | Microsoft.AdvancedThreatAnalytics.1_7.Service.contains.Microsoft.AdvancedThreatAnalytics.1_7.Container.Gateway | PerformanceHealth | True | False | Public |
| 服务(网关)安全性汇总监视器 | Microsoft.AdvancedThreatAnalytics.1_7.Service.Gateway.Security.RollupMonitor | Microsoft.AdvancedThreatAnalytics.1_7.Service | WorstOf | System.Health.SecurityState | Microsoft.AdvancedThreatAnalytics.1_7.Service.contains.Microsoft.AdvancedThreatAnalytics.1_7.Container.Gateway | SecurityHealth | True | False | Public |
| 根可用性汇总监视器 | Microsoft.AdvancedThreatAnalytics.Container.Availability.RollupMonitor | Microsoft.AdvancedThreatAnalytics.Container | WorstOf | System.Health.AvailabilityState | Microsoft.AdvancedThreatAnalytics.Container.contains.Microsoft.AdvancedThreatAnalytics.1_7.Service | AvailabilityHealth | True | False | Public |
| 根配置汇总监视器 | Microsoft.AdvancedThreatAnalytics.Container.Configuration.RollupMonitor | Microsoft.AdvancedThreatAnalytics.Container | WorstOf | System.Health.ConfigurationState | Microsoft.AdvancedThreatAnalytics.Container.contains.Microsoft.AdvancedThreatAnalytics.1_7.Service | ConfigurationHealth | True | False | Public |
| 根性能汇总监视器 | Microsoft.AdvancedThreatAnalytics.Container.Performance.RollupMonitor | Microsoft.AdvancedThreatAnalytics.Container | WorstOf | System.Health.PerformanceState | Microsoft.AdvancedThreatAnalytics.Container.contains.Microsoft.AdvancedThreatAnalytics.1_7.Service | PerformanceHealth | True | False | Public |
| 根安全性汇总监视器 | Microsoft.AdvancedThreatAnalytics.Container.Security.RollupMonitor | Microsoft.AdvancedThreatAnalytics.Container | WorstOf | System.Health.SecurityState | Microsoft.AdvancedThreatAnalytics.Container.contains.Microsoft.AdvancedThreatAnalytics.1_7.Service | SecurityHealth | True | False | Public |
| DisplayName | ID | Target | Category | Enabled | Alert Generate | Accessibility | |
|---|---|---|---|---|---|---|---|
 | ATA 中心服务监视器 | Microsoft.AdvancedThreatAnalytics.1_7.Center.ATACenter | Microsoft.AdvancedThreatAnalytics.1_7.Center | AvailabilityHealth | True | True | Public |
| 数据库 AtSVC 块大小 | Microsoft.AdvancedThreatAnalytics.1_7.Center.DatabaseAtSvcBlockSize.PerformanceHealth | Microsoft.AdvancedThreatAnalytics.1_7.Center | PerformanceHealth | True | True | Public |
| 数据库 DirectoryServicesActivity 块大小< | Microsoft.AdvancedThreatAnalytics.1_7.Center.DatabaseDirectoryServicesActivityBlockSize.PerformanceHealth | Microsoft.AdvancedThreatAnalytics.1_7.Center | PerformanceHealth | True | True | Public |
| 数据库 DNS 块大小 | Microsoft.AdvancedThreatAnalytics.1_7.Center.DatabaseDnsBlockSize.PerformanceHealth | Microsoft.AdvancedThreatAnalytics.1_7.Center | PerformanceHealth | True | True | Public |
| 数据库 DRSR 块大小 | Microsoft.AdvancedThreatAnalytics.1_7.Center.DatabaseDrsrBlockSize.PerformanceHealth | Microsoft.AdvancedThreatAnalytics.1_7.Center | PerformanceHealth | True | True | Public |
| 数据库 KerberosAP 块大小 | Microsoft.AdvancedThreatAnalytics.1_7.Center.DatabaseKerberosApBlockSize.PerformanceHealth | Microsoft.AdvancedThreatAnalytics.1_7.Center | PerformanceHealth | True | True | Public |
| 数据库 KerberosAP 块大小 | Microsoft.AdvancedThreatAnalytics.1_7.Center.DatabaseKerberosAsBlockSize.PerformanceHealth | Microsoft.AdvancedThreatAnalytics.1_7.Center | PerformanceHealth | True | True | Public |
| 数据库 KerberosTGS 块大小 | Microsoft.AdvancedThreatAnalytics.1_7.Center.DatabaseKerberosTgsBlockSize.PerformanceHealth | Microsoft.AdvancedThreatAnalytics.1_7.Center | PerformanceHealth | True | True | Public |
| 数据库 LDAP 块大小 | Microsoft.AdvancedThreatAnalytics.1_7.Center.DatabaseLdapBlockSize.PerformanceHealth | Microsoft.AdvancedThreatAnalytics.1_7.Center | PerformanceHealth | True | True | Public |
| 数据库 LsaRPC 块大小 | Microsoft.AdvancedThreatAnalytics.1_7.Center.DatabaseLsaRpcBlockSize.PerformanceHealth | Microsoft.AdvancedThreatAnalytics.1_7.Center | PerformanceHealth | True | True | Public |
| 数据库 Netlogon 块大小 | Microsoft.AdvancedThreatAnalytics.1_7.Center.DatabaseNetlogonBlockSize.PerformanceHealth | Microsoft.AdvancedThreatAnalytics.1_7.Center | PerformanceHealth | True | True | Public |
| 数据库 NTLM 块大小 | Microsoft.AdvancedThreatAnalytics.1_7.Center.DatabaseNtlmBlockSize.PerformanceHealth | Microsoft.AdvancedThreatAnalytics.1_7.Center | PerformanceHealth | True | True | Public |
| 数据库 NTLMEvent 块大小 | Microsoft.AdvancedThreatAnalytics.1_7.Center.DatabaseNtlmEventBlockSize.PerformanceHealth | Microsoft.AdvancedThreatAnalytics.1_7.Center | PerformanceHealth | True | True | Public |
| 数据库 SAMR 块大小 | Microsoft.AdvancedThreatAnalytics.1_7.Center.DatabaseSamrBlockSize.PerformanceHealth | Microsoft.AdvancedThreatAnalytics.1_7.Center | PerformanceHealth | True | True | Public |
| 数据库 ServiceControl 块大小 | Microsoft.AdvancedThreatAnalytics.1_7.Center.DatabaseServiceControlBlockSize.PerformanceHealth | Microsoft.AdvancedThreatAnalytics.1_7.Center | PerformanceHealth | True | True | Public |
| 数据库 SMB 块大小 | Microsoft.AdvancedThreatAnalytics.1_7.Center.DatabaseSmbBlockSize.PerformanceHealth | Microsoft.AdvancedThreatAnalytics.1_7.Center | PerformanceHealth | True | True | Public |
| 数据库 SrvSVC 块大小 | Microsoft.AdvancedThreatAnalytics.1_7.Center.DatabaseSrvSvcBlockSize.PerformanceHealth | Microsoft.AdvancedThreatAnalytics.1_7.Center | PerformanceHealth | True | True | Public |
| 数据库 TaskScheduler 块大小 | Microsoft.AdvancedThreatAnalytics.1_7.Center.DatabaseTaskSchedulerBlockSize.PerformanceHealth | Microsoft.AdvancedThreatAnalytics.1_7.Center | PerformanceHealth | True | True | Public |
| EntityProfiler 网络活动块大小 | Microsoft.AdvancedThreatAnalytics.1_7.Center.EntityProfilerNetworkActivityBlockSize.PerformanceHealth | Microsoft.AdvancedThreatAnalytics.1_7.Center | PerformanceHealth | True | True | Public |
| EntityReceiver 实体批块大小 | Microsoft.AdvancedThreatAnalytics.1_7.Center.EntityReceiverEntityBatchBlockSize.PerformanceHealth | Microsoft.AdvancedThreatAnalytics.1_7.Center | PerformanceHealth | True | True | Public |
| NetworkActivityProcessor 网络活动块大小 | Microsoft.AdvancedThreatAnalytics.1_7.Center.NetworkActivityProcessorNetworkActivityBlockSize.PerformanceHealth | Microsoft.AdvancedThreatAnalytics.1_7.Center | PerformanceHealth | True | True | Public |
| MongoDB 服务监视器 | Microsoft.AdvancedThreatAnalytics.1_7.Database.MongoDB | Microsoft.AdvancedThreatAnalytics.1_7.Database | AvailabilityHealth | True | True | Public |
| ATA 网关服务监视器 | Microsoft.AdvancedThreatAnalytics.1_7.Gateway.ATAGateway | Microsoft.AdvancedThreatAnalytics.1_7.Gateway | AvailabilityHealth | True | True | Public |
| ATA 网关服务监视器 | Microsoft.AdvancedThreatAnalytics.1_7.Gateway.ATAGatewayUpdater | Microsoft.AdvancedThreatAnalytics.1_7.Gateway | AvailabilityHealth | True | True | Public |
| EntityResolver 活动块大小 | Microsoft.AdvancedThreatAnalytics.1_7.Gateway.EntityResolverActivityBlockSize.PerformanceHealth | Microsoft.AdvancedThreatAnalytics.1_7.Gateway | PerformanceHealth | True | True | Public |
| EntitySender 实体批块大小 | Microsoft.AdvancedThreatAnalytics.1_7.Gateway.EntitySenderEntityBatchBlockSize.PerformanceHealth | Microsoft.AdvancedThreatAnalytics.1_7.Gateway | PerformanceHealth | True | True | Public |
| EntitySender 实体批处理发送时间 | Microsoft.AdvancedThreatAnalytics.1_7.Gateway.EntitySenderEntityBatchSendTime.PerformanceHealth | Microsoft.AdvancedThreatAnalytics.1_7.Gateway | PerformanceHealth | True | True | Public |
| NetworkActivityTranslator 消息数据 0 块大小 | Microsoft.AdvancedThreatAnalytics.1_7.Gateway.NetworkActivityTranslatorMessageData0BlockSize.PerformanceHealth | Microsoft.AdvancedThreatAnalytics.1_7.Gateway | PerformanceHealth | True | True | Public |
| NetworkActivityTranslator 消息数据 1 块大小 | Microsoft.AdvancedThreatAnalytics.1_7.Gateway.NetworkActivityTranslatorMessageData1BlockSize.PerformanceHealth | Microsoft.AdvancedThreatAnalytics.1_7.Gateway | PerformanceHealth | True | True | Public |
| NetworkActivityTranslator 消息数据 2 块大小 | Microsoft.AdvancedThreatAnalytics.1_7.Gateway.NetworkActivityTranslatorMessageData2BlockSize.PerformanceHealth | Microsoft.AdvancedThreatAnalytics.1_7.Gateway | PerformanceHealth | True | True | Public |
| NetworkListener ETW 丢弃事件数/秒 | Microsoft.AdvancedThreatAnalytics.1_7.Gateway.NetworkListenerETWDroppedEventsSec.PerformanceHealth | Microsoft.AdvancedThreatAnalytics.1_7.Gateway | PerformanceHealth | True | True | Public |
| NetworkListener PEF 丢弃事件数/秒 | Microsoft.AdvancedThreatAnalytics.1_7.Gateway.NetworkListenerPEFDroppedEventsSec.PerformanceHealth | Microsoft.AdvancedThreatAnalytics.1_7.Gateway | PerformanceHealth | True | True | Public |
| DisplayName | ID | Target | Category | Enabled | Alert Generate | |
|---|---|---|---|---|---|---|
 | 异常行为可疑活动 | Microsoft.AdvancedThreatAnalytics.1_7.Center.AbnormalBehaviorSuspiciousActivity | Microsoft.AdvancedThreatAnalytics.1_7.Center | SecurityHealth | False | True |
| 异常 SMB 可疑活动 | Microsoft.AdvancedThreatAnalytics.1_7.Center.AbnormalSmbSuspiciousActivity | Microsoft.AdvancedThreatAnalytics.1_7.Center | SecurityHealth | False | True |
| 帐户枚举可疑活动 | Microsoft.AdvancedThreatAnalytics.1_7.Center.AccountEnumerationSuspiciousActivity | Microsoft.AdvancedThreatAnalytics.1_7.Center | SecurityHealth | False | True |
| 暴力破解可疑活动 | Microsoft.AdvancedThreatAnalytics.1_7.Center.BruteForceSuspiciousActivity | Microsoft.AdvancedThreatAnalytics.1_7.Center | SecurityHealth | False | True |
| 中心数据库数据驱动器可用空间监视警报 | Microsoft.AdvancedThreatAnalytics.1_7.Center.CenterDatabaseDataDriveFreeSpaceMonitoringAlert | Microsoft.AdvancedThreatAnalytics.1_7.Center | AvailabilityHealth | True | True |
| 中心重载监视警报 | Microsoft.AdvancedThreatAnalytics.1_7.Center.CenterOverloadedMonitoringAlert | Microsoft.AdvancedThreatAnalytics.1_7.Center | PerformanceHealth | True | True |
| 证书到期监视警报 | Microsoft.AdvancedThreatAnalytics.1_7.Center.CertificateExpiryMonitoringAlert | Microsoft.AdvancedThreatAnalytics.1_7.Center | ConfigurationHealth | True | True |
| 计算机预身份验证失败可疑活动 | Microsoft.AdvancedThreatAnalytics.1_7.Center.ComputerPreauthenticationFailedSuspiciousActivity | Microsoft.AdvancedThreatAnalytics.1_7.Center | SecurityHealth | False | True |
| 数据库 AtSVC 块大小 | Microsoft.AdvancedThreatAnalytics.1_7.Center.DatabaseAtSvcBlockSize | Microsoft.AdvancedThreatAnalytics.1_7.Center | PerformanceCollection | True | False |
| 数据库 DirectoryServicesActivity 块大小 | Microsoft.AdvancedThreatAnalytics.1_7.Center.DatabaseDirectoryServicesActivityBlockSize | Microsoft.AdvancedThreatAnalytics.1_7.Center | PerformanceCollection | True | False |
| 数据库断开监视警报 | Microsoft.AdvancedThreatAnalytics.1_7.Center.DatabaseDisconnectedMonitoringAlert | Microsoft.AdvancedThreatAnalytics.1_7.Center | AvailabilityHealth | True | True |
| 数据库 DNS 块大小 | Microsoft.AdvancedThreatAnalytics.1_7.Center.DatabaseDnsBlockSize | Microsoft.AdvancedThreatAnalytics.1_7.Center | PerformanceCollection | True | False |
| 数据库 DRSR 块大小 | Microsoft.AdvancedThreatAnalytics.1_7.Center.DatabaseDrsrBlockSize | Microsoft.AdvancedThreatAnalytics.1_7.Center | PerformanceCollection | True | False |
| 数据库 KerberosAP 块大小 | Microsoft.AdvancedThreatAnalytics.1_7.Center.DatabaseKerberosApBlockSize | Microsoft.AdvancedThreatAnalytics.1_7.Center | PerformanceCollection | True | False |
| 数据库 KerberosAP 块大小 | Microsoft.AdvancedThreatAnalytics.1_7.Center.DatabaseKerberosAsBlockSize | Microsoft.AdvancedThreatAnalytics.1_7.Center | PerformanceCollection | True | False |
| 数据库 KerberosTGS 块大小 | Microsoft.AdvancedThreatAnalytics.1_7.Center.DatabaseKerberosTgsBlockSize | Microsoft.AdvancedThreatAnalytics.1_7.Center | PerformanceCollection | True | False |
| 数据库 LDAP 块大小 | Microsoft.AdvancedThreatAnalytics.1_7.Center.DatabaseLdapBlockSize | Microsoft.AdvancedThreatAnalytics.1_7.Center | PerformanceCollection | True | False |
| 数据库 LsaRPC 块大小 | Microsoft.AdvancedThreatAnalytics.1_7.Center.DatabaseLsaRpcBlockSize | Microsoft.AdvancedThreatAnalytics.1_7.Center | PerformanceCollection | True | False |
| 数据库 Netlogon 块大小 | Microsoft.AdvancedThreatAnalytics.1_7.Center.DatabaseNetlogonBlockSize | Microsoft.AdvancedThreatAnalytics.1_7.Center | PerformanceCollection | True | False |
| 数据库 NTLM 块大小 | Microsoft.AdvancedThreatAnalytics.1_7.Center.DatabaseNtlmBlockSize | Microsoft.AdvancedThreatAnalytics.1_7.Center | PerformanceCollection | True | False |
| 数据库 NTLMEvent 块大小 | Microsoft.AdvancedThreatAnalytics.1_7.Center.DatabaseNtlmEventBlockSize | Microsoft.AdvancedThreatAnalytics.1_7.Center | PerformanceCollection | True | False |
| 数据库 ServiceControl 块大小 | Microsoft.AdvancedThreatAnalytics.1_7.Center.DatabaseServiceControlBlockSize | Microsoft.AdvancedThreatAnalytics.1_7.Center | PerformanceCollection | True | False |
| 数据库 SMB 块大小 | Microsoft.AdvancedThreatAnalytics.1_7.Center.DatabaseSmbBlockSize | Microsoft.AdvancedThreatAnalytics.1_7.Center | PerformanceCollection | True | False |
| 数据库 SrvSVC 块大小 | Microsoft.AdvancedThreatAnalytics.1_7.Center.DatabaseSrvSvcBlockSize | Microsoft.AdvancedThreatAnalytics.1_7.Center | PerformanceCollection | True | False |
| 数据库 TaskScheduler 块大小 | Microsoft.AdvancedThreatAnalytics.1_7.Center.DatabaseTaskSchedulerBlockSize | Microsoft.AdvancedThreatAnalytics.1_7.Center | PerformanceCollection | True | False |
| 目录服务客户端帐户密码过期监视警报 | Microsoft.AdvancedThreatAnalytics.1_7.Center.DirectoryServicesClientAccountPasswordExpiryMonitoringAlert | Microsoft.AdvancedThreatAnalytics.1_7.Center | ConfigurationHealth | True | True |
| 目录服务复制可疑活动 | Microsoft.AdvancedThreatAnalytics.1_7.Center.DirectoryServicesReplicationSuspiciousActivity | Microsoft.AdvancedThreatAnalytics.1_7.Center | SecurityHealth | False | True |
| DNS 侦测可疑活动 | Microsoft.AdvancedThreatAnalytics.1_7.Center.DnsReconnaissanceSuspiciousActivity | Microsoft.AdvancedThreatAnalytics.1_7.Center | SecurityHealth | False | True |
| 域同步器未分配监视警报 | Microsoft.AdvancedThreatAnalytics.1_7.Center.DomainSynchronizerNotAssignedMonitoringAlert | Microsoft.AdvancedThreatAnalytics.1_7.Center | ConfigurationHealth | True | True |
| 加密降级可疑活动 | Microsoft.AdvancedThreatAnalytics.1_7.Center.EncryptionDowngradeSuspiciousActivity | Microsoft.AdvancedThreatAnalytics.1_7.Center | SecurityHealth | False | True |
| 加密降级可疑活动(黄金票证) | Microsoft.AdvancedThreatAnalytics.1_7.Center.EncryptionDowngradeSuspiciousActivity_GoldenTicket | Microsoft.AdvancedThreatAnalytics.1_7.Center | SecurityHealth | False | True |
| 加密降级可疑活动(超哈希传递攻击) | Microsoft.AdvancedThreatAnalytics.1_7.Center.EncryptionDowngradeSuspiciousActivity_OverpasstheHash | Microsoft.AdvancedThreatAnalytics.1_7.Center | SecurityHealth | False | True |
| 加密降级可疑活动(万能钥匙) | Microsoft.AdvancedThreatAnalytics.1_7.Center.EncryptionDowngradeSuspiciousActivity_SkeletonKey | Microsoft.AdvancedThreatAnalytics.1_7.Center | SecurityHealth | False | True |
| EntityProfiler 网络活动块大小 | Microsoft.AdvancedThreatAnalytics.1_7.Center.EntityProfilerNetworkActivityBlockSize | Microsoft.AdvancedThreatAnalytics.1_7.Center | PerformanceCollection | True | False |
| EntityReceiver 实体批块大小 | Microsoft.AdvancedThreatAnalytics.1_7.Center.EntityReceiverEntityBatchBlockSize | Microsoft.AdvancedThreatAnalytics.1_7.Center | PerformanceCollection | True | False |
| 枚举会话可疑活动 | Microsoft.AdvancedThreatAnalytics.1_7.Center.EnumerateSessionsSuspiciousActivity | Microsoft.AdvancedThreatAnalytics.1_7.Center | SecurityHealth | False | True |
| 伪造 PAC 可疑活动 | Microsoft.AdvancedThreatAnalytics.1_7.Center.ForgedPacSuspiciousActivity | Microsoft.AdvancedThreatAnalytics.1_7.Center | SecurityHealth | False | True |
| 网关捕捉网络适配器出错监视警报 | Microsoft.AdvancedThreatAnalytics.1_7.Center.GatewayCaptureNetworkAdapterFaultedMonitoringAlert | Microsoft.AdvancedThreatAnalytics.1_7.Center | AvailabilityHealth | True | True |
| 网关捕捉网络适配器缺少监视警报 | Microsoft.AdvancedThreatAnalytics.1_7.Center.GatewayCaptureNetworkAdapterMissingMonitoringAlert | Microsoft.AdvancedThreatAnalytics.1_7.Center | ConfigurationHealth | True | True |
| 网关目录服务客户端连接性监视警报 | Microsoft.AdvancedThreatAnalytics.1_7.Center.GatewayDirectoryServicesClientConnectivityMonitoringAlert | Microsoft.AdvancedThreatAnalytics.1_7.Center | AvailabilityHealth | True | True |
| 网关断开监视警报 | Microsoft.AdvancedThreatAnalytics.1_7.Center.GatewayDisconnectedMonitoringAlert | Microsoft.AdvancedThreatAnalytics.1_7.Center | AvailabilityHealth | True | True |
| 网关内存不足监视警报 | Microsoft.AdvancedThreatAnalytics.1_7.Center.GatewayLowMemoryMonitoringAlert | Microsoft.AdvancedThreatAnalytics.1_7.Center | PerformanceHealth | True | True |
| 网关未收到流量监视警报 | Microsoft.AdvancedThreatAnalytics.1_7.Center.GatewayNotReceivingTrafficMonitoringAlert | Microsoft.AdvancedThreatAnalytics.1_7.Center | AvailabilityHealth | True | True |
| 网关重载事件活动监视警报 | Microsoft.AdvancedThreatAnalytics.1_7.Center.GatewayOverloadedEventActivitiesMonitoringAlert | Microsoft.AdvancedThreatAnalytics.1_7.Center | PerformanceHealth | True | True |
| 网关重载网络活动监视警报 | Microsoft.AdvancedThreatAnalytics.1_7.Center.GatewayOverloadedNetworkActivitiesMonitoringAlert | Microsoft.AdvancedThreatAnalytics.1_7.Center | PerformanceHealth | True | True |
| 网关过时监视警报 | Microsoft.AdvancedThreatAnalytics.1_7.Center.GatewaysOutdatedMonitoringAlert | Microsoft.AdvancedThreatAnalytics.1_7.Center | ConfigurationHealth | True | True |
| 网关启动失败监视警报 | Microsoft.AdvancedThreatAnalytics.1_7.Center.GatewayStartFailureMonitoringAlert | Microsoft.AdvancedThreatAnalytics.1_7.Center | AvailabilityHealth | True | True |
| 蜜标活动可疑活动 | Microsoft.AdvancedThreatAnalytics.1_7.Center.HoneytokenActivitySuspiciousActivity | Microsoft.AdvancedThreatAnalytics.1_7.Center | SecurityHealth | False | True |
| LDAP 简单绑定明文密码可疑活动 | Microsoft.AdvancedThreatAnalytics.1_7.Center.LdapSimpleBindCleartextPasswordSuspiciousActivity | Microsoft.AdvancedThreatAnalytics.1_7.Center | SecurityHealth | False | True |
| 邮件监视警报 | Microsoft.AdvancedThreatAnalytics.1_7.Center.MailMonitoringAlert | Microsoft.AdvancedThreatAnalytics.1_7.Center | ConfigurationHealth | True | True |
| 大规模对象删除可疑活动 | Microsoft.AdvancedThreatAnalytics.1_7.Center.MassiveObjectDeletionSuspiciousActivity | Microsoft.AdvancedThreatAnalytics.1_7.Center | SecurityHealth | False | True |
| NetworkActivityProcessor 网络活动块大小 | Microsoft.AdvancedThreatAnalytics.1_7.Center.NetworkActivityProcessorNetworkActivityBlockSize | Microsoft.AdvancedThreatAnalytics.1_7.Center | PerformanceCollection | True | False |
| 哈希传递攻击可疑活动 | Microsoft.AdvancedThreatAnalytics.1_7.Center.PassTheHashSuspiciousActivity | Microsoft.AdvancedThreatAnalytics.1_7.Center | SecurityHealth | False | True |
| 票证传递攻击可疑活动 | Microsoft.AdvancedThreatAnalytics.1_7.Center.PassTheTicketSuspiciousActivity | Microsoft.AdvancedThreatAnalytics.1_7.Center | SecurityHealth | False | True |
| 远程执行可疑活动 | Microsoft.AdvancedThreatAnalytics.1_7.Center.RemoteExecutionSuspiciousActivity | Microsoft.AdvancedThreatAnalytics.1_7.Center | SecurityHealth | False | True |
| 检索数据保护备份密钥可疑活动 | Microsoft.AdvancedThreatAnalytics.1_7.Center.RetrieveDataProtectionBackupKeySuspiciousActivity | Microsoft.AdvancedThreatAnalytics.1_7.Center | SecurityHealth | False | True |
| SAMR 侦测可疑活动 | Microsoft.AdvancedThreatAnalytics.1_7.Center.SamrReconnaissanceSuspiciousActivity | Microsoft.AdvancedThreatAnalytics.1_7.Center | SecurityHealth | False | True |
| Syslog 监视警报 | Microsoft.AdvancedThreatAnalytics.1_7.Center.SyslogMonitoringAlert | Microsoft.AdvancedThreatAnalytics.1_7.Center | ConfigurationHealth | True | True |
| ATA 网关未能针对域控制器进行身份验证 | Microsoft.AdvancedThreatAnalytics.1_7.Gateway.ActiveDirectoryAuthenticationFailure | Microsoft.AdvancedThreatAnalytics.1_7.Gateway | AvailabilityHealth | True | True |
| 注册表中可能禁用计数器 | Microsoft.AdvancedThreatAnalytics.1_7.Gateway.CountersDisabled | Microsoft.AdvancedThreatAnalytics.1_7.Gateway | AvailabilityHealth | True | True |
| EntityResolver 活动块大小 | Microsoft.AdvancedThreatAnalytics.1_7.Gateway.EntityResolverActivityBlockSize | Microsoft.AdvancedThreatAnalytics.1_7.Gateway | PerformanceCollection | True | False |
| EntitySender 实体批块大小 | Microsoft.AdvancedThreatAnalytics.1_7.Gateway.EntitySenderEntityBatchBlockSize | Microsoft.AdvancedThreatAnalytics.1_7.Gateway | PerformanceCollection | True | False |
| EntitySender 实体批处理发送时间 | Microsoft.AdvancedThreatAnalytics.1_7.Gateway.EntitySenderEntityBatchSendTime | Microsoft.AdvancedThreatAnalytics.1_7.Gateway | PerformanceCollection | True | False |
| ATA 网关未能针对中心进行身份验证 | Microsoft.AdvancedThreatAnalytics.1_7.Gateway.FailedToAuthenticateAgainstCenter | Microsoft.AdvancedThreatAnalytics.1_7.Gateway | AvailabilityHealth | True | True |
| ATA 网关未能建立与 ATA 中心的连接 | Microsoft.AdvancedThreatAnalytics.1_7.Gateway.FailedToEstablishConnectionToCenter | Microsoft.AdvancedThreatAnalytics.1_7.Gateway | AvailabilityHealth | True | True |
| ATA 网关未能分析 SIEM Syslog 消息 | Microsoft.AdvancedThreatAnalytics.1_7.Gateway.FailedToParseSyslog | Microsoft.AdvancedThreatAnalytics.1_7.Gateway | AvailabilityHealth | True | True |
| ATA 网关未能使用 LDAP 协议查询域控制器 | Microsoft.AdvancedThreatAnalytics.1_7.Gateway.FailedToQueryDCUsingLDAPProtocol | Microsoft.AdvancedThreatAnalytics.1_7.Gateway | AvailabilityHealth | True | True |
| ATA 网关未能从 ATA 中心同步配置 | Microsoft.AdvancedThreatAnalytics.1_7.Gateway.FailedToSynchronizeConfigurationFromCenter | Microsoft.AdvancedThreatAnalytics.1_7.Gateway | AvailabilityHealth | True | True |
| ATA 网关未能验证中心证书链 | Microsoft.AdvancedThreatAnalytics.1_7.Gateway.FailedToValidateCenterCertificateChain | Microsoft.AdvancedThreatAnalytics.1_7.Gateway | AvailabilityHealth | True | True |
| ATA 网关内存不足 | Microsoft.AdvancedThreatAnalytics.1_7.Gateway.GatewayDoesNotHaveEnoughMemory | Microsoft.AdvancedThreatAnalytics.1_7.Gateway | AvailabilityHealth | True | True |
| GatewayUpdaterResourceManager 提交内存最大大小 | Microsoft.AdvancedThreatAnalytics.1_7.Gateway.GatewayUpdaterResourceManagerCommitMemoryMaxSize | Microsoft.AdvancedThreatAnalytics.1_7.Gateway | PerformanceCollection | True | False |
| GatewayUpdaterResourceManager CPU 时间最大 \% | Microsoft.AdvancedThreatAnalytics.1_7.Gateway.GatewayUpdaterResourceManagerCPUTimeMax_ | Microsoft.AdvancedThreatAnalytics.1_7.Gateway | PerformanceCollection | True | False |
| GatewayUpdaterResourceManager 工作集限制大小 | Microsoft.AdvancedThreatAnalytics.1_7.Gateway.GatewayUpdaterResourceManagerWorkingSetLimitSize | Microsoft.AdvancedThreatAnalytics.1_7.Gateway | PerformanceCollection | True | False |
| HOSTS 文件中包含一个指向计算机简称的主机条目 | Microsoft.AdvancedThreatAnalytics.1_7.Gateway.HostEntryInHOSTSFile | Microsoft.AdvancedThreatAnalytics.1_7.Gateway | AvailabilityHealth | True | True |
| 已在 ATA 网关安装消息分析器 | Microsoft.AdvancedThreatAnalytics.1_7.Gateway.MessageAnalyzerIsInstalledOnGateway | Microsoft.AdvancedThreatAnalytics.1_7.Gateway | AvailabilityHealth | True | True |
| NetworkActivityTranslator 消息数据 0 块大小 | Microsoft.AdvancedThreatAnalytics.1_7.Gateway.NetworkActivityTranslatorMessageData0BlockSize | Microsoft.AdvancedThreatAnalytics.1_7.Gateway | PerformanceCollection | True | False |
| NetworkActivityTranslator 消息数据 1 块大小 | Microsoft.AdvancedThreatAnalytics.1_7.Gateway.NetworkActivityTranslatorMessageData1BlockSize | Microsoft.AdvancedThreatAnalytics.1_7.Gateway | PerformanceCollection | True | False |
| NetworkActivityTranslator 消息数据 2 块大小 | Microsoft.AdvancedThreatAnalytics.1_7.Gateway.NetworkActivityTranslatorMessageData2BlockSize | Microsoft.AdvancedThreatAnalytics.1_7.Gateway | PerformanceCollection | True | False |
| NetworkListener ETW 丢弃事件数/秒 | Microsoft.AdvancedThreatAnalytics.1_7.Gateway.NetworkListenerETWDroppedEvents_Sec | Microsoft.AdvancedThreatAnalytics.1_7.Gateway | PerformanceCollection | True | False |
| NetworkListener PEF 丢弃事件数/秒 | Microsoft.AdvancedThreatAnalytics.1_7.Gateway.NetworkListenerPEFDroppedEvents_Sec | Microsoft.AdvancedThreatAnalytics.1_7.Gateway | PerformanceCollection | True | False |
| NetworkListener PEF 分析消息数/秒 | Microsoft.AdvancedThreatAnalytics.1_7.Gateway.NetworkListenerPEFParsedMessages_Sec | Microsoft.AdvancedThreatAnalytics.1_7.Gateway | PerformanceCollection | True | False |
| 计算机上存在其他挂起的安装 | Microsoft.AdvancedThreatAnalytics.1_7.Gateway.OtherPendingInstallations | Microsoft.AdvancedThreatAnalytics.1_7.Gateway | AvailabilityHealth | True | True |
| PEF (消息分析器)未正确安装 | Microsoft.AdvancedThreatAnalytics.1_7.Gateway.PEFWasNotInstalledCorrectly | Microsoft.AdvancedThreatAnalytics.1_7.Gateway | AvailabilityHealth | True | True |
| 已针对 ATA 网关中的进程名称启用 PID | Microsoft.AdvancedThreatAnalytics.1_7.Gateway.PIDsWasEnabledForProcessNamesInGateway | Microsoft.AdvancedThreatAnalytics.1_7.Gateway | AvailabilityHealth | True | True |
| DisplayName | ID | Target | Accessibility | Category | Enabled | |
|---|---|---|---|---|---|---|
 | Restart ATACenter Service | Microsoft.AdvancedThreatAnalytics.1_7.Center.ATACenter.Restart | Microsoft.AdvancedThreatAnalytics.1_7.Center | Internal | Maintenance | True |
| Start ATACenter Service | Microsoft.AdvancedThreatAnalytics.1_7.Center.ATACenter.Start | Microsoft.AdvancedThreatAnalytics.1_7.Center | Internal | Maintenance | True |
| Stop ATACenter Service | Microsoft.AdvancedThreatAnalytics.1_7.Center.ATACenter.Stop | Microsoft.AdvancedThreatAnalytics.1_7.Center | Internal | Maintenance | True |
| Restart MongoDB Service | Microsoft.AdvancedThreatAnalytics.1_7.Database.MongoDB.Restart | Microsoft.AdvancedThreatAnalytics.1_7.Database | Internal | Maintenance | True |
| Start MongoDB Service | Microsoft.AdvancedThreatAnalytics.1_7.Database.MongoDB.Start | Microsoft.AdvancedThreatAnalytics.1_7.Database | Internal | Maintenance | True |
| Stop MongoDB Service | Microsoft.AdvancedThreatAnalytics.1_7.Database.MongoDB.Stop | Microsoft.AdvancedThreatAnalytics.1_7.Database | Internal | Maintenance | True |
| Restart ATAGateway Service | Microsoft.AdvancedThreatAnalytics.1_7.Gateway.ATAGateway.Restart | Microsoft.AdvancedThreatAnalytics.1_7.Gateway | Internal | Maintenance | True |
| Start ATAGateway Service | Microsoft.AdvancedThreatAnalytics.1_7.Gateway.ATAGateway.Start | Microsoft.AdvancedThreatAnalytics.1_7.Gateway | Internal | Maintenance | True |
| Stop ATAGateway Service | Microsoft.AdvancedThreatAnalytics.1_7.Gateway.ATAGateway.Stop | Microsoft.AdvancedThreatAnalytics.1_7.Gateway | Internal | Maintenance | True |
| Restart ATAGatewayUpdater Service | Microsoft.AdvancedThreatAnalytics.1_7.Gateway.ATAGatewayUpdater.Restart | Microsoft.AdvancedThreatAnalytics.1_7.Gateway | Internal | Maintenance | True |
| Start ATAGatewayUpdater Service | Microsoft.AdvancedThreatAnalytics.1_7.Gateway.ATAGatewayUpdater.Start | Microsoft.AdvancedThreatAnalytics.1_7.Gateway | Internal | Maintenance | True |
| Stop ATAGatewayUpdater Service | Microsoft.AdvancedThreatAnalytics.1_7.Gateway.ATAGatewayUpdater.Stop | Microsoft.AdvancedThreatAnalytics.1_7.Gateway | Internal | Maintenance | True |
| DisplayName | ID | Target | Accessibility | Enabled | |
|---|---|---|---|---|---|
 | Open ATA Center Console Task | Microsoft.AdvancedThreatAnalytics.1_7.Center.ATAConsole.Task | Microsoft.AdvancedThreatAnalytics.1_7.Center | Internal | True |
| ID | FolderName | ElementID | |
|---|---|---|---|
 | Microsoft.AdvancedThreatAnalytics.1_7.Center.SecurityAlerts.FolderItem | Microsoft.AdvancedThreatAnalytics.1_7.Folder.Root | Microsoft.AdvancedThreatAnalytics.1_7.Center.SecurityAlerts |
| Microsoft.AdvancedThreatAnalytics.1_7.HealthAlerts.FolderItem | Microsoft.AdvancedThreatAnalytics.1_7.Folder.Root | Microsoft.AdvancedThreatAnalytics.1_7.HealthAlerts |
| Microsoft.AdvancedThreatAnalytics.1_7.PerformanceAlerts.FolderItem | Microsoft.AdvancedThreatAnalytics.1_7.Folder.Root | Microsoft.AdvancedThreatAnalytics.1_7.PerformanceAlerts |
| Microsoft.AdvancedThreatAnalytics.1_7.StateGrid.FolderItem | Microsoft.AdvancedThreatAnalytics.1_7.Folder.Root | Microsoft.AdvancedThreatAnalytics.1_7.StateGrid |
| DisplayName | ID | ParentFolder | Accessibility | |
|---|---|---|---|---|
| Advanced Threat Analytics 1.7 | Microsoft.AdvancedThreatAnalytics.1_7.Folder.Root | Microsoft.AdvancedThreatAnalytics.Folder.Root | Public |
| DisplayName | ID | ImageID | |
|---|---|---|---|
 | Advanced Threat Analytics 1.7 中心 | Microsoft.AdvancedThreatAnalytics.1_7.Center | Microsoft.AdvancedThreatAnalytics.Center.Small.Icon |
| Advanced Threat Analytics 1.7 网关容器 | Microsoft.AdvancedThreatAnalytics.1_7.Container.Gateway | Microsoft.AdvancedThreatAnalytics.Container.Gateway.Small.Icon |
| Advanced Threat Analytics 1.7 轻型网关 | Microsoft.AdvancedThreatAnalytics.1_7.Gateway.LightWeight | Microsoft.AdvancedThreatAnalytics.LightweightGateway.Small.Icon |
| Advanced Threat Analytics 1.7 独立网关 | Microsoft.AdvancedThreatAnalytics.1_7.Gateway.Standalone | Microsoft.AdvancedThreatAnalytics.Gateway.Standalone.Small.Icon |
| Advanced Threat Analytics 1.7 服务 | Microsoft.AdvancedThreatAnalytics.1_7.Service | Microsoft.AdvancedThreatAnalytics.Service.Small.Icon |
| DisplayName | ID | Target | Type | Accessibility | Visible | |
|---|---|---|---|---|---|---|
 | 安全警报 | Microsoft.AdvancedThreatAnalytics.1_7.Center.SecurityAlerts | Microsoft.AdvancedThreatAnalytics.1_7.Center | Microsoft.SystemCenter.AlertViewType | Internal | True |
| 运行状况警报 | Microsoft.AdvancedThreatAnalytics.1_7.HealthAlerts | Microsoft.AdvancedThreatAnalytics.1_7.InstancesGroup | Microsoft.SystemCenter.AlertViewType | Public | True |
| 性能警报 | Microsoft.AdvancedThreatAnalytics.1_7.PerformanceAlerts | Microsoft.AdvancedThreatAnalytics.1_7.InstancesGroup | Microsoft.SystemCenter.AlertViewType | Public | True |
| ID | Type | Platform | Target | Accessibility | |
|---|---|---|---|---|---|
 | Microsoft.AdvancedThreatAnalytics.1_7.StateGrid.Center.Implementation | Microsoft.AdvancedThreatAnalytics.1_7.StateGrid.Center | Wpf, Silverlight | Public | |
| Microsoft.AdvancedThreatAnalytics.1_7.StateGrid.Details.Implementation | Microsoft.AdvancedThreatAnalytics.1_7.StateGrid.Details | Wpf, Silverlight | Public | |
| Microsoft.AdvancedThreatAnalytics.1_7.StateGrid.Gateway.Implementation | Microsoft.AdvancedThreatAnalytics.1_7.StateGrid.Gateway | Wpf, Silverlight | Public | |
| Microsoft.AdvancedThreatAnalytics.1_7.StateGrid.Implementation | Microsoft.AdvancedThreatAnalytics.1_7.StateGrid | Wpf, Silverlight | Public |
| ID | Type | Parent | Accessibility | |
|---|---|---|---|---|
| Microsoft.AdvancedThreatAnalytics.1_7.StateGrid.Center.Reference | Microsoft.AdvancedThreatAnalytics.1_7.StateGrid.Center | Microsoft.AdvancedThreatAnalytics.1_7.StateGrid | Public |
| Microsoft.AdvancedThreatAnalytics.1_7.StateGrid.Details.Reference | Microsoft.AdvancedThreatAnalytics.1_7.StateGrid.Details | Microsoft.AdvancedThreatAnalytics.1_7.StateGrid | Public |
| Microsoft.AdvancedThreatAnalytics.1_7.StateGrid.Gateway.Reference | Microsoft.AdvancedThreatAnalytics.1_7.StateGrid.Gateway | Microsoft.AdvancedThreatAnalytics.1_7.StateGrid | Public |
| Microsoft.AdvancedThreatAnalytics.1_7.StateGrid.Reference | Microsoft.AdvancedThreatAnalytics.1_7.StateGrid | Microsoft.AdvancedThreatAnalytics.1_7.Folder.Root | Public |
| DisplayName | ID | Accessibility | |
|---|---|---|---|
| 运行状况状态 | Microsoft.AdvancedThreatAnalytics.1_7.StateGrid | Public |
| Health State - Center | Microsoft.AdvancedThreatAnalytics.1_7.StateGrid.Center | Public |
| Health State - Details | Microsoft.AdvancedThreatAnalytics.1_7.StateGrid.Details | Public |
| Health State - Gateway | Microsoft.AdvancedThreatAnalytics.1_7.StateGrid.Gateway | Public |
Home
CHS 
Show Management Pack References