Módulo de administración para Microsoft Advanced Threat Analytics 1.7
Este es el módulo de administración de biblioteca para Advanced Threat Analytics. Este módulo de administración contiene todas las clases, vistas, monitores y detecciones para ATA.
| DisplayName | ID | Base Class | Abstract | Hosted | Singleton | Group | Extension | Accessibility | |
|---|---|---|---|---|---|---|---|---|---|
 | Centro de Advanced Threat Analytics 1.7 | Microsoft.AdvancedThreatAnalytics.1_7.Center | Microsoft.Windows.ComputerRole | False | True | False | False | False | Public |
 | Contenedor de puerta de enlace de Advanced Threat Analytics 1.7 | Microsoft.AdvancedThreatAnalytics.1_7.Container.Gateway | Microsoft.AdvancedThreatAnalytics.ServiceComponent | False | False | False | False | False | Public |
 | Base de datos de Advanced Threat Analytics 1.7 | Microsoft.AdvancedThreatAnalytics.1_7.Database | System.Database | False | True | False | False | False | Public |
 | Puerta de enlace de Advanced Threat Analytics 1.7 | Microsoft.AdvancedThreatAnalytics.1_7.Gateway | Microsoft.Windows.ComputerRole | True | True | False | False | False | Public |
 | Puerta de enlace ligera de Advanced Threat Analytics 1.7 | Microsoft.AdvancedThreatAnalytics.1_7.Gateway.LightWeight | Microsoft.AdvancedThreatAnalytics.1_7.Gateway | False | True | False | False | False | Public |
 | Puerta de enlace independiente de Advanced Threat Analytics 1.7 | Microsoft.AdvancedThreatAnalytics.1_7.Gateway.Standalone | Microsoft.AdvancedThreatAnalytics.1_7.Gateway | False | True | False | False | False | Public |
 | Grupo de instancias de Advanced Threat Analytics 1.7 | Microsoft.AdvancedThreatAnalytics.1_7.InstancesGroup | Microsoft.SystemCenter.InstanceGroup | False | False | True | True | False | Public |
 | Clase de valor de inicialización de Advanced Threat Analytics 1.7 | Microsoft.AdvancedThreatAnalytics.1_7.Seed | Microsoft.Windows.LocalApplication | False | True | False | False | False | Public |
 | Grupo de servidores de Advanced Threat Analytics 1.7 | Microsoft.AdvancedThreatAnalytics.1_7.ServersGroup | Microsoft.SystemCenter.ComputerGroup | False | False | True | True | False | Public |
 | Servicio Advanced Threat Analytics 1.7 | Microsoft.AdvancedThreatAnalytics.1_7.Service | Microsoft.AdvancedThreatAnalytics.ServiceComponent | False | False | False | False | False | Public |
| Grupo de servicios de Advanced Threat Analytics 1.7 | Microsoft.AdvancedThreatAnalytics.1_7.ServiceGroup | Microsoft.SystemCenter.InstanceGroup | False | False | True | True | False | Public |
| DisplayName | ID | Source | Target | Accessibility | Abstract | |
|---|---|---|---|---|---|---|
 | Base de datos de hosts del Centro de Microsoft Advanced Threat Analytics 1.7 | Microsoft.AdvancedThreatAnalytics.1_7.Center.hosts.Microsoft.AdvancedThreatAnalytics.1_7.Database | Microsoft.AdvancedThreatAnalytics.1_7.Center | Microsoft.AdvancedThreatAnalytics.1_7.Database | Public | False |
| El contenedor (puerta de enlace) de Advanced Threat Analytics 1.7 contiene la puerta de enlace ligera 1.7. | Microsoft.AdvancedThreatAnalytics.1_7.Container.Gateway.contains.Microsoft.AdvancedThreatAnalytics.1_7.Gateway.LightWeight | Microsoft.AdvancedThreatAnalytics.1_7.Container.Gateway | Microsoft.AdvancedThreatAnalytics.1_7.Gateway.LightWeight | Public | False |
| El contenedor (puerta de enlace) de Advanced Threat Analytics 1.7 contiene la puerta de enlace independiente 1.7. | Microsoft.AdvancedThreatAnalytics.1_7.Container.Gateway.contains.Microsoft.AdvancedThreatAnalytics.1_7.Gateway.Standalone | Microsoft.AdvancedThreatAnalytics.1_7.Container.Gateway | Microsoft.AdvancedThreatAnalytics.1_7.Gateway.Standalone | Public | False |
| El servicio de Advanced Threat Analytics 1.7 contiene el Centro 1.7. | Microsoft.AdvancedThreatAnalytics.1_7.Service.contains.Microsoft.AdvancedThreatAnalytics.1_7.Center | Microsoft.AdvancedThreatAnalytics.1_7.Service | Microsoft.AdvancedThreatAnalytics.1_7.Center | Public | False |
| El servicio de Advanced Threat Analytics 1.7 contiene el contenedor 1.7 (puerta de enlace). | Microsoft.AdvancedThreatAnalytics.1_7.Service.contains.Microsoft.AdvancedThreatAnalytics.1_7.Container.Gateway | Microsoft.AdvancedThreatAnalytics.1_7.Service | Microsoft.AdvancedThreatAnalytics.1_7.Container.Gateway | Public | False |
| El contenedor de Advanced Threat Analytics contiene el servicio 1.7. | Microsoft.AdvancedThreatAnalytics.Container.contains.Microsoft.AdvancedThreatAnalytics.1_7.Service | Microsoft.AdvancedThreatAnalytics.Container | Microsoft.AdvancedThreatAnalytics.1_7.Service | Public | False |
| DisplayName | ID | Isolation | Accessibility | |
|---|---|---|---|---|
 | Origen de datos de detección del Centro de Advanced Threat Analytics 1.7 | Microsoft.AdvancedThreatAnalytics.1_7.Center.Discovery.DataSource | Any | Internal |
| Origen de datos de detección de aplicación distribuida de Advanced Threat Analytics 1.7 | Microsoft.AdvancedThreatAnalytics.1_7.DistributedApplication.Discovery.DataSource | Any | Internal |
| Origen de datos de detección de puerta de enlace de Advanced Threat Analytics 1.7 | Microsoft.AdvancedThreatAnalytics.1_7.Gateway.Discovery.DataSource | Any | Internal |
| Proveedor de archivos de registro de ATA | Microsoft.AdvancedThreatAnalytics.LogFileProvider | Any | Internal |
| ID | Target | |
|---|---|---|
 | Microsoft.AdvancedThreatAnalytics.1_7.Center.ATAConsole.Task.Category | Microsoft.AdvancedThreatAnalytics.1_7.Center.ATAConsole.Task |
| Microsoft.AdvancedThreatAnalytics.1_7.Center.Icon.Category | Microsoft.AdvancedThreatAnalytics.Center.Icon |
| Microsoft.AdvancedThreatAnalytics.1_7.Center.Small.Icon.Category | Microsoft.AdvancedThreatAnalytics.Center.Small.Icon |
| Microsoft.AdvancedThreatAnalytics.1_7.Container.Gateway.Icon.Category | Microsoft.AdvancedThreatAnalytics.Container.Gateway.Icon |
| Microsoft.AdvancedThreatAnalytics.1_7.Container.Gateway.Small.Icon.Category | Microsoft.AdvancedThreatAnalytics.Container.Gateway.Small.Icon |
| Microsoft.AdvancedThreatAnalytics.1_7.Gateway.Standalone.Icon.Category | Microsoft.AdvancedThreatAnalytics.Gateway.Standalone.Icon |
| Microsoft.AdvancedThreatAnalytics.1_7.Gateway.Standalone.Small.Icon.Category | Microsoft.AdvancedThreatAnalytics.Gateway.Standalone.Small.Icon |
| Microsoft.AdvancedThreatAnalytics.1_7.LightweightGateway.Icon.Category | Microsoft.AdvancedThreatAnalytics.LightweightGateway.Icon |
| Microsoft.AdvancedThreatAnalytics.1_7.LightweightGateway.Small.Icon.Category | Microsoft.AdvancedThreatAnalytics.LightweightGateway.Small.Icon |
| Microsoft.AdvancedThreatAnalytics.1_7.Service.Icon.Category | Microsoft.AdvancedThreatAnalytics.Service.Icon |
| Microsoft.AdvancedThreatAnalytics.1_7.Service.Small.Icon.Category | Microsoft.AdvancedThreatAnalytics.Service.Small.Icon |
| DisplayName | ID | Target | Enabled | |
|---|---|---|---|---|
 | Detección del Centro de Advanced Threat Analytics 1.7 | Microsoft.AdvancedThreatAnalytics.1_7.Center.Discovery | Microsoft.AdvancedThreatAnalytics.1_7.Seed | True |
| Detección de aplicación distribuida de Advanced Threat Analytics 1.7 | Microsoft.AdvancedThreatAnalytics.1_7.DistributedApplication.Discovery | Microsoft.SystemCenter.AllManagementServersPool | True |
| Detección de puerta de enlace de Advanced Threat Analytics 1.7 | Microsoft.AdvancedThreatAnalytics.1_7.Gateway.Discovery | Microsoft.AdvancedThreatAnalytics.1_7.Seed | True |
| Detección de grupo de instancias de Advanced Threat Analytics 1.7 | Microsoft.AdvancedThreatAnalytics.1_7.InstancesGroup.Discovery | Microsoft.AdvancedThreatAnalytics.1_7.InstancesGroup | True |
| Detección de valor de inicialización de Advanced Threat Analytics 1.7 | Microsoft.AdvancedThreatAnalytics.1_7.Seed.Discovery | Microsoft.Windows.Server.OperatingSystem | True |
| Detección de grupos de servidores de Advanced Threat Analytics 1.7 | Microsoft.AdvancedThreatAnalytics.1_7.ServersGroup.Discovery | Microsoft.AdvancedThreatAnalytics.1_7.ServersGroup | True |
| Detección de grupo de servicios de Advanced Threat Analytics 1.7 | Microsoft.AdvancedThreatAnalytics.1_7.ServiceGroup.Discovery | Microsoft.AdvancedThreatAnalytics.1_7.ServiceGroup | True |
| DisplayName | ID | Target | Algorithm | Source Monitor | Relationship | Category | Enabled | Alert Generate | Accessibility | |
|---|---|---|---|---|---|---|---|---|---|---|
 | Monitor de paquete acumulativo de disponibilidad del Centro | Microsoft.AdvancedThreatAnalytics.1_7.Center.Availability.RollupMonitor | Microsoft.AdvancedThreatAnalytics.1_7.Center | WorstOf | System.Health.AvailabilityState | Microsoft.AdvancedThreatAnalytics.1_7.Center.hosts.Microsoft.AdvancedThreatAnalytics.1_7.Database | AvailabilityHealth | True | False | Public |
| Monitor de paquete acumulativo de configuración del Centro | Microsoft.AdvancedThreatAnalytics.1_7.Center.Configuration.RollupMonitor | Microsoft.AdvancedThreatAnalytics.1_7.Center | WorstOf | System.Health.ConfigurationState | Microsoft.AdvancedThreatAnalytics.1_7.Center.hosts.Microsoft.AdvancedThreatAnalytics.1_7.Database | ConfigurationHealth | True | False | Public |
| Monitor de paquete acumulativo de rendimiento del Centro | Microsoft.AdvancedThreatAnalytics.1_7.Center.Performance.RollupMonitor | Microsoft.AdvancedThreatAnalytics.1_7.Center | WorstOf | System.Health.PerformanceState | Microsoft.AdvancedThreatAnalytics.1_7.Center.hosts.Microsoft.AdvancedThreatAnalytics.1_7.Database | PerformanceHealth | True | False | Public |
| Monitor de paquete acumulativo de seguridad de Centro | Microsoft.AdvancedThreatAnalytics.1_7.Center.Security.RollupMonitor | Microsoft.AdvancedThreatAnalytics.1_7.Center | WorstOf | System.Health.SecurityState | Microsoft.AdvancedThreatAnalytics.1_7.Center.hosts.Microsoft.AdvancedThreatAnalytics.1_7.Database | SecurityHealth | True | False | Public |
| Monitor de paquete acumulativo de disponibilidad de puerta de enlace (ligera) | Microsoft.AdvancedThreatAnalytics.1_7.Container.Gateway.LightWeight.Availability.RollupMonitor | Microsoft.AdvancedThreatAnalytics.1_7.Container.Gateway | WorstOf | System.Health.AvailabilityState | Microsoft.AdvancedThreatAnalytics.1_7.Container.Gateway.contains.Microsoft.AdvancedThreatAnalytics.1_7.Gateway.LightWeight | AvailabilityHealth | True | False | Public |
| Monitor de paquete acumulativo de configuración de puerta de enlace (ligera) | Microsoft.AdvancedThreatAnalytics.1_7.Container.Gateway.LightWeight.Configuration.RollupMonitor | Microsoft.AdvancedThreatAnalytics.1_7.Container.Gateway | WorstOf | System.Health.ConfigurationState | Microsoft.AdvancedThreatAnalytics.1_7.Container.Gateway.contains.Microsoft.AdvancedThreatAnalytics.1_7.Gateway.LightWeight | ConfigurationHealth | True | False | Public |
| Monitor de paquete acumulativo de rendimiento de puerta de enlace (ligera) | Microsoft.AdvancedThreatAnalytics.1_7.Container.Gateway.LightWeight.Performance.RollupMonitor | Microsoft.AdvancedThreatAnalytics.1_7.Container.Gateway | WorstOf | System.Health.PerformanceState | Microsoft.AdvancedThreatAnalytics.1_7.Container.Gateway.contains.Microsoft.AdvancedThreatAnalytics.1_7.Gateway.LightWeight | PerformanceHealth | True | False | Public |
| Monitor de paquete acumulativo de seguridad de puerta de enlace (ligera) | Microsoft.AdvancedThreatAnalytics.1_7.Container.Gateway.LightWeight.Security.RollupMonitor | Microsoft.AdvancedThreatAnalytics.1_7.Container.Gateway | WorstOf | System.Health.SecurityState | Microsoft.AdvancedThreatAnalytics.1_7.Container.Gateway.contains.Microsoft.AdvancedThreatAnalytics.1_7.Gateway.LightWeight | SecurityHealth | True | False | Public |
| Monitor de paquete acumulativo de disponibilidad de puerta de enlace (independiente) | Microsoft.AdvancedThreatAnalytics.1_7.Container.Gateway.Standalone.Availability.RollupMonitor | Microsoft.AdvancedThreatAnalytics.1_7.Container.Gateway | WorstOf | System.Health.AvailabilityState | Microsoft.AdvancedThreatAnalytics.1_7.Container.Gateway.contains.Microsoft.AdvancedThreatAnalytics.1_7.Gateway.Standalone | AvailabilityHealth | True | False | Public |
| Monitor de paquete acumulativo de configuración de puerta de enlace (independiente) | Microsoft.AdvancedThreatAnalytics.1_7.Container.Gateway.Standalone.Configuration.RollupMonitor | Microsoft.AdvancedThreatAnalytics.1_7.Container.Gateway | WorstOf | System.Health.ConfigurationState | Microsoft.AdvancedThreatAnalytics.1_7.Container.Gateway.contains.Microsoft.AdvancedThreatAnalytics.1_7.Gateway.Standalone | ConfigurationHealth | True | False | Public |
| Monitor de paquete acumulativo de rendimiento de puerta de enlace (independiente) | Microsoft.AdvancedThreatAnalytics.1_7.Container.Gateway.Standalone.Performance.RollupMonitor | Microsoft.AdvancedThreatAnalytics.1_7.Container.Gateway | WorstOf | System.Health.PerformanceState | Microsoft.AdvancedThreatAnalytics.1_7.Container.Gateway.contains.Microsoft.AdvancedThreatAnalytics.1_7.Gateway.Standalone | PerformanceHealth | True | False | Public |
| Monitor de paquete acumulativo de seguridad de puerta de enlace (independiente) | Microsoft.AdvancedThreatAnalytics.1_7.Container.Gateway.Standalone.Security.RollupMonitor | Microsoft.AdvancedThreatAnalytics.1_7.Container.Gateway | WorstOf | System.Health.SecurityState | Microsoft.AdvancedThreatAnalytics.1_7.Container.Gateway.contains.Microsoft.AdvancedThreatAnalytics.1_7.Gateway.Standalone | SecurityHealth | True | False | Public |
| Monitor de paquete acumulativo de disponibilidad de servicio (Centro) | Microsoft.AdvancedThreatAnalytics.1_7.Service.Center.Availability.RollupMonitor | Microsoft.AdvancedThreatAnalytics.1_7.Service | WorstOf | System.Health.AvailabilityState | Microsoft.AdvancedThreatAnalytics.1_7.Service.contains.Microsoft.AdvancedThreatAnalytics.1_7.Center | AvailabilityHealth | True | False | Public |
| Monitor de paquete acumulativo de configuración de servicio (Centro) | Microsoft.AdvancedThreatAnalytics.1_7.Service.Center.Configuration.RollupMonitor | Microsoft.AdvancedThreatAnalytics.1_7.Service | WorstOf | System.Health.ConfigurationState | Microsoft.AdvancedThreatAnalytics.1_7.Service.contains.Microsoft.AdvancedThreatAnalytics.1_7.Center | ConfigurationHealth | True | False | Public |
| Monitor de paquete acumulativo de rendimiento de servicio (Centro) | Microsoft.AdvancedThreatAnalytics.1_7.Service.Center.Performance.RollupMonitor | Microsoft.AdvancedThreatAnalytics.1_7.Service | WorstOf | System.Health.PerformanceState | Microsoft.AdvancedThreatAnalytics.1_7.Service.contains.Microsoft.AdvancedThreatAnalytics.1_7.Center | PerformanceHealth | True | False | Public |
| Monitor de paquete acumulativo de seguridad de servicio (Centro) | Microsoft.AdvancedThreatAnalytics.1_7.Service.Center.Security.RollupMonitor | Microsoft.AdvancedThreatAnalytics.1_7.Service | WorstOf | System.Health.SecurityState | Microsoft.AdvancedThreatAnalytics.1_7.Service.contains.Microsoft.AdvancedThreatAnalytics.1_7.Center | SecurityHealth | True | False | Public |
| Monitor de paquete acumulativo de disponibilidad de servicio (puerta de enlace) | Microsoft.AdvancedThreatAnalytics.1_7.Service.Gateway.Availability.RollupMonitor | Microsoft.AdvancedThreatAnalytics.1_7.Service | WorstOf | System.Health.AvailabilityState | Microsoft.AdvancedThreatAnalytics.1_7.Service.contains.Microsoft.AdvancedThreatAnalytics.1_7.Container.Gateway | AvailabilityHealth | True | False | Public |
| Monitor de paquete acumulativo de configuración de servicio (puerta de enlace) | Microsoft.AdvancedThreatAnalytics.1_7.Service.Gateway.Configuration.RollupMonitor | Microsoft.AdvancedThreatAnalytics.1_7.Service | WorstOf | System.Health.ConfigurationState | Microsoft.AdvancedThreatAnalytics.1_7.Service.contains.Microsoft.AdvancedThreatAnalytics.1_7.Container.Gateway | ConfigurationHealth | True | False | Public |
| Monitor de paquete acumulativo de rendimiento de servicio (puerta de enlace) | Microsoft.AdvancedThreatAnalytics.1_7.Service.Gateway.Performance.RollupMonitor | Microsoft.AdvancedThreatAnalytics.1_7.Service | WorstOf | System.Health.PerformanceState | Microsoft.AdvancedThreatAnalytics.1_7.Service.contains.Microsoft.AdvancedThreatAnalytics.1_7.Container.Gateway | PerformanceHealth | True | False | Public |
| Monitor de paquete acumulativo de seguridad de servicio (puerta de enlace) | Microsoft.AdvancedThreatAnalytics.1_7.Service.Gateway.Security.RollupMonitor | Microsoft.AdvancedThreatAnalytics.1_7.Service | WorstOf | System.Health.SecurityState | Microsoft.AdvancedThreatAnalytics.1_7.Service.contains.Microsoft.AdvancedThreatAnalytics.1_7.Container.Gateway | SecurityHealth | True | False | Public |
| Monitor de paquete acumulativo de disponibilidad de raíz | Microsoft.AdvancedThreatAnalytics.Container.Availability.RollupMonitor | Microsoft.AdvancedThreatAnalytics.Container | WorstOf | System.Health.AvailabilityState | Microsoft.AdvancedThreatAnalytics.Container.contains.Microsoft.AdvancedThreatAnalytics.1_7.Service | AvailabilityHealth | True | False | Public |
| Monitor de paquete acumulativo de configuración de raíz | Microsoft.AdvancedThreatAnalytics.Container.Configuration.RollupMonitor | Microsoft.AdvancedThreatAnalytics.Container | WorstOf | System.Health.ConfigurationState | Microsoft.AdvancedThreatAnalytics.Container.contains.Microsoft.AdvancedThreatAnalytics.1_7.Service | ConfigurationHealth | True | False | Public |
| Monitor de paquete acumulativo de rendimiento de raíz | Microsoft.AdvancedThreatAnalytics.Container.Performance.RollupMonitor | Microsoft.AdvancedThreatAnalytics.Container | WorstOf | System.Health.PerformanceState | Microsoft.AdvancedThreatAnalytics.Container.contains.Microsoft.AdvancedThreatAnalytics.1_7.Service | PerformanceHealth | True | False | Public |
| Monitor de paquete acumulativo de seguridad de raíz | Microsoft.AdvancedThreatAnalytics.Container.Security.RollupMonitor | Microsoft.AdvancedThreatAnalytics.Container | WorstOf | System.Health.SecurityState | Microsoft.AdvancedThreatAnalytics.Container.contains.Microsoft.AdvancedThreatAnalytics.1_7.Service | SecurityHealth | True | False | Public |
| DisplayName | ID | Target | Category | Enabled | Alert Generate | Accessibility | |
|---|---|---|---|---|---|---|---|
 | Monitor de servicio del Centro de ATA | Microsoft.AdvancedThreatAnalytics.1_7.Center.ATACenter | Microsoft.AdvancedThreatAnalytics.1_7.Center | AvailabilityHealth | True | True | Public |
| Tamaño de bloque de AtSVC de base de datos | Microsoft.AdvancedThreatAnalytics.1_7.Center.DatabaseAtSvcBlockSize.PerformanceHealth | Microsoft.AdvancedThreatAnalytics.1_7.Center | PerformanceHealth | True | True | Public |
| Tamaño de bloque de DirectoryServicesActivity de base de datos< | Microsoft.AdvancedThreatAnalytics.1_7.Center.DatabaseDirectoryServicesActivityBlockSize.PerformanceHealth | Microsoft.AdvancedThreatAnalytics.1_7.Center | PerformanceHealth | True | True | Public |
| Tamaño de bloque de DNS de base de datos | Microsoft.AdvancedThreatAnalytics.1_7.Center.DatabaseDnsBlockSize.PerformanceHealth | Microsoft.AdvancedThreatAnalytics.1_7.Center | PerformanceHealth | True | True | Public |
| Tamaño de bloque de DRSR de base de datos | Microsoft.AdvancedThreatAnalytics.1_7.Center.DatabaseDrsrBlockSize.PerformanceHealth | Microsoft.AdvancedThreatAnalytics.1_7.Center | PerformanceHealth | True | True | Public |
| Tamaño de bloque de KerberosAP de base de datos | Microsoft.AdvancedThreatAnalytics.1_7.Center.DatabaseKerberosApBlockSize.PerformanceHealth | Microsoft.AdvancedThreatAnalytics.1_7.Center | PerformanceHealth | True | True | Public |
| Tamaño de bloque de KerberosAS de base de datos | Microsoft.AdvancedThreatAnalytics.1_7.Center.DatabaseKerberosAsBlockSize.PerformanceHealth | Microsoft.AdvancedThreatAnalytics.1_7.Center | PerformanceHealth | True | True | Public |
| Tamaño de bloque de KerberosTGS de base de datos | Microsoft.AdvancedThreatAnalytics.1_7.Center.DatabaseKerberosTgsBlockSize.PerformanceHealth | Microsoft.AdvancedThreatAnalytics.1_7.Center | PerformanceHealth | True | True | Public |
| Tamaño de bloque de LDAP de base de datos | Microsoft.AdvancedThreatAnalytics.1_7.Center.DatabaseLdapBlockSize.PerformanceHealth | Microsoft.AdvancedThreatAnalytics.1_7.Center | PerformanceHealth | True | True | Public |
| Tamaño de bloque de LsaRPC de base de datos | Microsoft.AdvancedThreatAnalytics.1_7.Center.DatabaseLsaRpcBlockSize.PerformanceHealth | Microsoft.AdvancedThreatAnalytics.1_7.Center | PerformanceHealth | True | True | Public |
| Tamaño de bloque de Netlogon de base de datos | Microsoft.AdvancedThreatAnalytics.1_7.Center.DatabaseNetlogonBlockSize.PerformanceHealth | Microsoft.AdvancedThreatAnalytics.1_7.Center | PerformanceHealth | True | True | Public |
| Tamaño de bloque de NTLM de base de datos | Microsoft.AdvancedThreatAnalytics.1_7.Center.DatabaseNtlmBlockSize.PerformanceHealth | Microsoft.AdvancedThreatAnalytics.1_7.Center | PerformanceHealth | True | True | Public |
| Tamaño de bloque de NTLMEvent de base de datos | Microsoft.AdvancedThreatAnalytics.1_7.Center.DatabaseNtlmEventBlockSize.PerformanceHealth | Microsoft.AdvancedThreatAnalytics.1_7.Center | PerformanceHealth | True | True | Public |
| Tamaño de bloque de SAMR de base de datos | Microsoft.AdvancedThreatAnalytics.1_7.Center.DatabaseSamrBlockSize.PerformanceHealth | Microsoft.AdvancedThreatAnalytics.1_7.Center | PerformanceHealth | True | True | Public |
| Tamaño de bloque de ServiceControl de base de datos | Microsoft.AdvancedThreatAnalytics.1_7.Center.DatabaseServiceControlBlockSize.PerformanceHealth | Microsoft.AdvancedThreatAnalytics.1_7.Center | PerformanceHealth | True | True | Public |
| Tamaño de bloque de SMB de base de datos | Microsoft.AdvancedThreatAnalytics.1_7.Center.DatabaseSmbBlockSize.PerformanceHealth | Microsoft.AdvancedThreatAnalytics.1_7.Center | PerformanceHealth | True | True | Public |
| Tamaño de bloque de SrvSVC de base de datos | Microsoft.AdvancedThreatAnalytics.1_7.Center.DatabaseSrvSvcBlockSize.PerformanceHealth | Microsoft.AdvancedThreatAnalytics.1_7.Center | PerformanceHealth | True | True | Public |
| Tamaño de bloque de TaskScheduler de base de datos | Microsoft.AdvancedThreatAnalytics.1_7.Center.DatabaseTaskSchedulerBlockSize.PerformanceHealth | Microsoft.AdvancedThreatAnalytics.1_7.Center | PerformanceHealth | True | True | Public |
| Tamaño de bloque de actividad de red de EntityProfiler | Microsoft.AdvancedThreatAnalytics.1_7.Center.EntityProfilerNetworkActivityBlockSize.PerformanceHealth | Microsoft.AdvancedThreatAnalytics.1_7.Center | PerformanceHealth | True | True | Public |
| Tamaño de bloque de lote de entidad de EntityReceiver | Microsoft.AdvancedThreatAnalytics.1_7.Center.EntityReceiverEntityBatchBlockSize.PerformanceHealth | Microsoft.AdvancedThreatAnalytics.1_7.Center | PerformanceHealth | True | True | Public |
| Tamaño de bloque de actividad de red de NetworkActivityProcessor | Microsoft.AdvancedThreatAnalytics.1_7.Center.NetworkActivityProcessorNetworkActivityBlockSize.PerformanceHealth | Microsoft.AdvancedThreatAnalytics.1_7.Center | PerformanceHealth | True | True | Public |
| Monitor de servicio de MongoDB | Microsoft.AdvancedThreatAnalytics.1_7.Database.MongoDB | Microsoft.AdvancedThreatAnalytics.1_7.Database | AvailabilityHealth | True | True | Public |
| Monitor de servicio de puerta de enlace de ATA | Microsoft.AdvancedThreatAnalytics.1_7.Gateway.ATAGateway | Microsoft.AdvancedThreatAnalytics.1_7.Gateway | AvailabilityHealth | True | True | Public |
| Monitor de servicio de puerta de enlace de ATA | Microsoft.AdvancedThreatAnalytics.1_7.Gateway.ATAGatewayUpdater | Microsoft.AdvancedThreatAnalytics.1_7.Gateway | AvailabilityHealth | True | True | Public |
| Tamaño de bloque de actividad de EntityResolver | Microsoft.AdvancedThreatAnalytics.1_7.Gateway.EntityResolverActivityBlockSize.PerformanceHealth | Microsoft.AdvancedThreatAnalytics.1_7.Gateway | PerformanceHealth | True | True | Public |
| Tamaño de bloque de lote de entidad de EntitySender | Microsoft.AdvancedThreatAnalytics.1_7.Gateway.EntitySenderEntityBatchBlockSize.PerformanceHealth | Microsoft.AdvancedThreatAnalytics.1_7.Gateway | PerformanceHealth | True | True | Public |
| Hora de envío de lote de entidad de EntitySender | Microsoft.AdvancedThreatAnalytics.1_7.Gateway.EntitySenderEntityBatchSendTime.PerformanceHealth | Microsoft.AdvancedThreatAnalytics.1_7.Gateway | PerformanceHealth | True | True | Public |
| Tamaño de bloque 0 de datos de mensaje de NetworkActivityTranslator | Microsoft.AdvancedThreatAnalytics.1_7.Gateway.NetworkActivityTranslatorMessageData0BlockSize.PerformanceHealth | Microsoft.AdvancedThreatAnalytics.1_7.Gateway | PerformanceHealth | True | True | Public |
| Tamaño de bloque 1 de datos de mensaje de NetworkActivityTranslator | Microsoft.AdvancedThreatAnalytics.1_7.Gateway.NetworkActivityTranslatorMessageData1BlockSize.PerformanceHealth | Microsoft.AdvancedThreatAnalytics.1_7.Gateway | PerformanceHealth | True | True | Public |
| Tamaño de bloque 2 de datos de mensaje de NetworkActivityTranslator | Microsoft.AdvancedThreatAnalytics.1_7.Gateway.NetworkActivityTranslatorMessageData2BlockSize.PerformanceHealth | Microsoft.AdvancedThreatAnalytics.1_7.Gateway | PerformanceHealth | True | True | Public |
| Eventos descartados/segundo de ETW de NetworkListener | Microsoft.AdvancedThreatAnalytics.1_7.Gateway.NetworkListenerETWDroppedEventsSec.PerformanceHealth | Microsoft.AdvancedThreatAnalytics.1_7.Gateway | PerformanceHealth | True | True | Public |
| Eventos descartados/segundo de PEF de NetworkListener | Microsoft.AdvancedThreatAnalytics.1_7.Gateway.NetworkListenerPEFDroppedEventsSec.PerformanceHealth | Microsoft.AdvancedThreatAnalytics.1_7.Gateway | PerformanceHealth | True | True | Public |
| DisplayName | ID | Target | Category | Enabled | Alert Generate | |
|---|---|---|---|---|---|---|
 | Actividad sospechosa con comportamiento anormal | Microsoft.AdvancedThreatAnalytics.1_7.Center.AbnormalBehaviorSuspiciousActivity | Microsoft.AdvancedThreatAnalytics.1_7.Center | SecurityHealth | False | True |
| Actividad sospechosa de SMB anormal | Microsoft.AdvancedThreatAnalytics.1_7.Center.AbnormalSmbSuspiciousActivity | Microsoft.AdvancedThreatAnalytics.1_7.Center | SecurityHealth | False | True |
| Actividad sospechosa de enumeración de cuenta | Microsoft.AdvancedThreatAnalytics.1_7.Center.AccountEnumerationSuspiciousActivity | Microsoft.AdvancedThreatAnalytics.1_7.Center | SecurityHealth | False | True |
| Actividad sospechosa de fuerza bruta | Microsoft.AdvancedThreatAnalytics.1_7.Center.BruteForceSuspiciousActivity | Microsoft.AdvancedThreatAnalytics.1_7.Center | SecurityHealth | False | True |
| Alerta de supervisión de espacio disponible en unidad de datos de base de datos del Centro | Microsoft.AdvancedThreatAnalytics.1_7.Center.CenterDatabaseDataDriveFreeSpaceMonitoringAlert | Microsoft.AdvancedThreatAnalytics.1_7.Center | AvailabilityHealth | True | True |
| Alerta de supervisión de sobrecarga del Centro | Microsoft.AdvancedThreatAnalytics.1_7.Center.CenterOverloadedMonitoringAlert | Microsoft.AdvancedThreatAnalytics.1_7.Center | PerformanceHealth | True | True |
| Alerta de supervisión de expiración de certificado | Microsoft.AdvancedThreatAnalytics.1_7.Center.CertificateExpiryMonitoringAlert | Microsoft.AdvancedThreatAnalytics.1_7.Center | ConfigurationHealth | True | True |
| Actividad sospechosa de error de autenticación previa de equipo | Microsoft.AdvancedThreatAnalytics.1_7.Center.ComputerPreauthenticationFailedSuspiciousActivity | Microsoft.AdvancedThreatAnalytics.1_7.Center | SecurityHealth | False | True |
| Tamaño de bloque de AtSVC de base de datos | Microsoft.AdvancedThreatAnalytics.1_7.Center.DatabaseAtSvcBlockSize | Microsoft.AdvancedThreatAnalytics.1_7.Center | PerformanceCollection | True | False |
| Tamaño de bloque de DirectoryServicesActivity de base de datos | Microsoft.AdvancedThreatAnalytics.1_7.Center.DatabaseDirectoryServicesActivityBlockSize | Microsoft.AdvancedThreatAnalytics.1_7.Center | PerformanceCollection | True | False |
| Alerta de supervisión de desconexión de base de datos | Microsoft.AdvancedThreatAnalytics.1_7.Center.DatabaseDisconnectedMonitoringAlert | Microsoft.AdvancedThreatAnalytics.1_7.Center | AvailabilityHealth | True | True |
| Tamaño de bloque de DNS de base de datos | Microsoft.AdvancedThreatAnalytics.1_7.Center.DatabaseDnsBlockSize | Microsoft.AdvancedThreatAnalytics.1_7.Center | PerformanceCollection | True | False |
| Tamaño de bloque de DRSR de base de datos | Microsoft.AdvancedThreatAnalytics.1_7.Center.DatabaseDrsrBlockSize | Microsoft.AdvancedThreatAnalytics.1_7.Center | PerformanceCollection | True | False |
| Tamaño de bloque de KerberosAP de base de datos | Microsoft.AdvancedThreatAnalytics.1_7.Center.DatabaseKerberosApBlockSize | Microsoft.AdvancedThreatAnalytics.1_7.Center | PerformanceCollection | True | False |
| Tamaño de bloque de KerberosAS de base de datos | Microsoft.AdvancedThreatAnalytics.1_7.Center.DatabaseKerberosAsBlockSize | Microsoft.AdvancedThreatAnalytics.1_7.Center | PerformanceCollection | True | False |
| Tamaño de bloque de KerberosTGS de base de datos | Microsoft.AdvancedThreatAnalytics.1_7.Center.DatabaseKerberosTgsBlockSize | Microsoft.AdvancedThreatAnalytics.1_7.Center | PerformanceCollection | True | False |
| Tamaño de bloque de LDAP de base de datos | Microsoft.AdvancedThreatAnalytics.1_7.Center.DatabaseLdapBlockSize | Microsoft.AdvancedThreatAnalytics.1_7.Center | PerformanceCollection | True | False |
| Tamaño de bloque de LsaRPC de base de datos | Microsoft.AdvancedThreatAnalytics.1_7.Center.DatabaseLsaRpcBlockSize | Microsoft.AdvancedThreatAnalytics.1_7.Center | PerformanceCollection | True | False |
| Tamaño de bloque de Netlogon de base de datos | Microsoft.AdvancedThreatAnalytics.1_7.Center.DatabaseNetlogonBlockSize | Microsoft.AdvancedThreatAnalytics.1_7.Center | PerformanceCollection | True | False |
| Tamaño de bloque de NTLM de base de datos | Microsoft.AdvancedThreatAnalytics.1_7.Center.DatabaseNtlmBlockSize | Microsoft.AdvancedThreatAnalytics.1_7.Center | PerformanceCollection | True | False |
| Tamaño de bloque de NTLMEvent de base de datos | Microsoft.AdvancedThreatAnalytics.1_7.Center.DatabaseNtlmEventBlockSize | Microsoft.AdvancedThreatAnalytics.1_7.Center | PerformanceCollection | True | False |
| Tamaño de bloque de ServiceControl de base de datos | Microsoft.AdvancedThreatAnalytics.1_7.Center.DatabaseServiceControlBlockSize | Microsoft.AdvancedThreatAnalytics.1_7.Center | PerformanceCollection | True | False |
| Tamaño de bloque de SMB de base de datos | Microsoft.AdvancedThreatAnalytics.1_7.Center.DatabaseSmbBlockSize | Microsoft.AdvancedThreatAnalytics.1_7.Center | PerformanceCollection | True | False |
| Tamaño de bloque de SrvSVC de base de datos | Microsoft.AdvancedThreatAnalytics.1_7.Center.DatabaseSrvSvcBlockSize | Microsoft.AdvancedThreatAnalytics.1_7.Center | PerformanceCollection | True | False |
| Tamaño de bloque de TaskScheduler de base de datos | Microsoft.AdvancedThreatAnalytics.1_7.Center.DatabaseTaskSchedulerBlockSize | Microsoft.AdvancedThreatAnalytics.1_7.Center | PerformanceCollection | True | False |
| Alerta de supervisión de expiración de contraseña de cuenta de cliente de Servicios de directorio | Microsoft.AdvancedThreatAnalytics.1_7.Center.DirectoryServicesClientAccountPasswordExpiryMonitoringAlert | Microsoft.AdvancedThreatAnalytics.1_7.Center | ConfigurationHealth | True | True |
| Actividad sospechosa de replicación de Servicios de directorio | Microsoft.AdvancedThreatAnalytics.1_7.Center.DirectoryServicesReplicationSuspiciousActivity | Microsoft.AdvancedThreatAnalytics.1_7.Center | SecurityHealth | False | True |
| Actividad sospechosa de reconocimiento de DNS | Microsoft.AdvancedThreatAnalytics.1_7.Center.DnsReconnaissanceSuspiciousActivity | Microsoft.AdvancedThreatAnalytics.1_7.Center | SecurityHealth | False | True |
| Alerta de supervisión de sincronizador de dominio no asignado | Microsoft.AdvancedThreatAnalytics.1_7.Center.DomainSynchronizerNotAssignedMonitoringAlert | Microsoft.AdvancedThreatAnalytics.1_7.Center | ConfigurationHealth | True | True |
| Actividad sospechosa de degradación de cifrado | Microsoft.AdvancedThreatAnalytics.1_7.Center.EncryptionDowngradeSuspiciousActivity | Microsoft.AdvancedThreatAnalytics.1_7.Center | SecurityHealth | False | True |
| Actividad sospechosa de degradación de cifrado (golden ticket) | Microsoft.AdvancedThreatAnalytics.1_7.Center.EncryptionDowngradeSuspiciousActivity_GoldenTicket | Microsoft.AdvancedThreatAnalytics.1_7.Center | SecurityHealth | False | True |
| Actividad sospechosa de degradación de cifrado (overpass-the-hash) | Microsoft.AdvancedThreatAnalytics.1_7.Center.EncryptionDowngradeSuspiciousActivity_OverpasstheHash | Microsoft.AdvancedThreatAnalytics.1_7.Center | SecurityHealth | False | True |
| Actividad sospechosa de degradación de cifrado (llave maestra) | Microsoft.AdvancedThreatAnalytics.1_7.Center.EncryptionDowngradeSuspiciousActivity_SkeletonKey | Microsoft.AdvancedThreatAnalytics.1_7.Center | SecurityHealth | False | True |
| Tamaño de bloque de actividad de red de EntityProfiler | Microsoft.AdvancedThreatAnalytics.1_7.Center.EntityProfilerNetworkActivityBlockSize | Microsoft.AdvancedThreatAnalytics.1_7.Center | PerformanceCollection | True | False |
| Tamaño de bloque de lote de entidad de EntityReceiver | Microsoft.AdvancedThreatAnalytics.1_7.Center.EntityReceiverEntityBatchBlockSize | Microsoft.AdvancedThreatAnalytics.1_7.Center | PerformanceCollection | True | False |
| Actividad sospechosa de enumeración de sesiones | Microsoft.AdvancedThreatAnalytics.1_7.Center.EnumerateSessionsSuspiciousActivity | Microsoft.AdvancedThreatAnalytics.1_7.Center | SecurityHealth | False | True |
| Actividad sospechosa de PAC falsificado | Microsoft.AdvancedThreatAnalytics.1_7.Center.ForgedPacSuspiciousActivity | Microsoft.AdvancedThreatAnalytics.1_7.Center | SecurityHealth | False | True |
| Alerta de supervisión de error del adaptador de red de captura de puerta de enlace | Microsoft.AdvancedThreatAnalytics.1_7.Center.GatewayCaptureNetworkAdapterFaultedMonitoringAlert | Microsoft.AdvancedThreatAnalytics.1_7.Center | AvailabilityHealth | True | True |
| Alerta de supervisión de falta de adaptador de red de captura de puerta de enlace | Microsoft.AdvancedThreatAnalytics.1_7.Center.GatewayCaptureNetworkAdapterMissingMonitoringAlert | Microsoft.AdvancedThreatAnalytics.1_7.Center | ConfigurationHealth | True | True |
| Alerta de supervisión de conectividad de cliente de Servicios de directorio de puerta de enlace | Microsoft.AdvancedThreatAnalytics.1_7.Center.GatewayDirectoryServicesClientConnectivityMonitoringAlert | Microsoft.AdvancedThreatAnalytics.1_7.Center | AvailabilityHealth | True | True |
| Alerta de supervisión de desconexión de puerta de enlace | Microsoft.AdvancedThreatAnalytics.1_7.Center.GatewayDisconnectedMonitoringAlert | Microsoft.AdvancedThreatAnalytics.1_7.Center | AvailabilityHealth | True | True |
| Alerta de supervisión de memoria baja de puerta de enlace | Microsoft.AdvancedThreatAnalytics.1_7.Center.GatewayLowMemoryMonitoringAlert | Microsoft.AdvancedThreatAnalytics.1_7.Center | PerformanceHealth | True | True |
| Alerta de supervisión de puerta de enlace que no recibe tráfico | Microsoft.AdvancedThreatAnalytics.1_7.Center.GatewayNotReceivingTrafficMonitoringAlert | Microsoft.AdvancedThreatAnalytics.1_7.Center | AvailabilityHealth | True | True |
| Alerta de supervisión de actividades de evento con sobrecarga en la puerta de enlace | Microsoft.AdvancedThreatAnalytics.1_7.Center.GatewayOverloadedEventActivitiesMonitoringAlert | Microsoft.AdvancedThreatAnalytics.1_7.Center | PerformanceHealth | True | True |
| Alerta de supervisión de actividades de red con sobrecarga en la puerta de enlace | Microsoft.AdvancedThreatAnalytics.1_7.Center.GatewayOverloadedNetworkActivitiesMonitoringAlert | Microsoft.AdvancedThreatAnalytics.1_7.Center | PerformanceHealth | True | True |
| Alerta de supervisión de obsolescencia en puertas de enlace | Microsoft.AdvancedThreatAnalytics.1_7.Center.GatewaysOutdatedMonitoringAlert | Microsoft.AdvancedThreatAnalytics.1_7.Center | ConfigurationHealth | True | True |
| Alerta de supervisión de error de inicio de puerta de enlace | Microsoft.AdvancedThreatAnalytics.1_7.Center.GatewayStartFailureMonitoringAlert | Microsoft.AdvancedThreatAnalytics.1_7.Center | AvailabilityHealth | True | True |
| Actividad sospechosa de honeytoken | Microsoft.AdvancedThreatAnalytics.1_7.Center.HoneytokenActivitySuspiciousActivity | Microsoft.AdvancedThreatAnalytics.1_7.Center | SecurityHealth | False | True |
| Actividad sospechosa de contraseña de texto no cifrado de enlace simple de LDAP | Microsoft.AdvancedThreatAnalytics.1_7.Center.LdapSimpleBindCleartextPasswordSuspiciousActivity | Microsoft.AdvancedThreatAnalytics.1_7.Center | SecurityHealth | False | True |
| Alerta de supervisión de correo | Microsoft.AdvancedThreatAnalytics.1_7.Center.MailMonitoringAlert | Microsoft.AdvancedThreatAnalytics.1_7.Center | ConfigurationHealth | True | True |
| Actividad sospechosa de eliminación masiva de objetos | Microsoft.AdvancedThreatAnalytics.1_7.Center.MassiveObjectDeletionSuspiciousActivity | Microsoft.AdvancedThreatAnalytics.1_7.Center | SecurityHealth | False | True |
| Tamaño de bloque de actividad de red de NetworkActivityProcessor | Microsoft.AdvancedThreatAnalytics.1_7.Center.NetworkActivityProcessorNetworkActivityBlockSize | Microsoft.AdvancedThreatAnalytics.1_7.Center | PerformanceCollection | True | False |
| Actividad pass-the-hash sospechosa | Microsoft.AdvancedThreatAnalytics.1_7.Center.PassTheHashSuspiciousActivity | Microsoft.AdvancedThreatAnalytics.1_7.Center | SecurityHealth | False | True |
| Actividad pass-the-ticket sospechosa | Microsoft.AdvancedThreatAnalytics.1_7.Center.PassTheTicketSuspiciousActivity | Microsoft.AdvancedThreatAnalytics.1_7.Center | SecurityHealth | False | True |
| Actividad sospechosa de ejecución remota | Microsoft.AdvancedThreatAnalytics.1_7.Center.RemoteExecutionSuspiciousActivity | Microsoft.AdvancedThreatAnalytics.1_7.Center | SecurityHealth | False | True |
| Actividad sospechosa de recuperación de clave de copia de seguridad de protección de datos | Microsoft.AdvancedThreatAnalytics.1_7.Center.RetrieveDataProtectionBackupKeySuspiciousActivity | Microsoft.AdvancedThreatAnalytics.1_7.Center | SecurityHealth | False | True |
| Actividad sospechosa de reconocimiento de SAMR | Microsoft.AdvancedThreatAnalytics.1_7.Center.SamrReconnaissanceSuspiciousActivity | Microsoft.AdvancedThreatAnalytics.1_7.Center | SecurityHealth | False | True |
| Alerta de supervisión de Syslog | Microsoft.AdvancedThreatAnalytics.1_7.Center.SyslogMonitoringAlert | Microsoft.AdvancedThreatAnalytics.1_7.Center | ConfigurationHealth | True | True |
| La puerta de enlace de ATA no se pudo autenticar en el controlador de dominio. | Microsoft.AdvancedThreatAnalytics.1_7.Gateway.ActiveDirectoryAuthenticationFailure | Microsoft.AdvancedThreatAnalytics.1_7.Gateway | AvailabilityHealth | True | True |
| Puede que los contadores estén deshabilitados en el Registro. | Microsoft.AdvancedThreatAnalytics.1_7.Gateway.CountersDisabled | Microsoft.AdvancedThreatAnalytics.1_7.Gateway | AvailabilityHealth | True | True |
| Tamaño de bloque de actividad de EntityResolver | Microsoft.AdvancedThreatAnalytics.1_7.Gateway.EntityResolverActivityBlockSize | Microsoft.AdvancedThreatAnalytics.1_7.Gateway | PerformanceCollection | True | False |
| Tamaño de bloque de lote de entidad de EntitySender | Microsoft.AdvancedThreatAnalytics.1_7.Gateway.EntitySenderEntityBatchBlockSize | Microsoft.AdvancedThreatAnalytics.1_7.Gateway | PerformanceCollection | True | False |
| Hora de envío de lote de entidad de EntitySender | Microsoft.AdvancedThreatAnalytics.1_7.Gateway.EntitySenderEntityBatchSendTime | Microsoft.AdvancedThreatAnalytics.1_7.Gateway | PerformanceCollection | True | False |
| La puerta de enlace de ATA no se pudo autenticar en el Centro. | Microsoft.AdvancedThreatAnalytics.1_7.Gateway.FailedToAuthenticateAgainstCenter | Microsoft.AdvancedThreatAnalytics.1_7.Gateway | AvailabilityHealth | True | True |
| La puerta de enlace de ATA no pudo establecer conexión con el Centro de ATA. | Microsoft.AdvancedThreatAnalytics.1_7.Gateway.FailedToEstablishConnectionToCenter | Microsoft.AdvancedThreatAnalytics.1_7.Gateway | AvailabilityHealth | True | True |
| La puerta de enlace de ATA no pudo analizar el mensaje de Syslog de SIEM. | Microsoft.AdvancedThreatAnalytics.1_7.Gateway.FailedToParseSyslog | Microsoft.AdvancedThreatAnalytics.1_7.Gateway | AvailabilityHealth | True | True |
| La puerta de enlace de ATA no pudo consultar el controlador de dominio mediante el protocolo LDAP. | Microsoft.AdvancedThreatAnalytics.1_7.Gateway.FailedToQueryDCUsingLDAPProtocol | Microsoft.AdvancedThreatAnalytics.1_7.Gateway | AvailabilityHealth | True | True |
| La puerta de enlace de ATA no pudo sincronizar la configuración del Centro de ATA. | Microsoft.AdvancedThreatAnalytics.1_7.Gateway.FailedToSynchronizeConfigurationFromCenter | Microsoft.AdvancedThreatAnalytics.1_7.Gateway | AvailabilityHealth | True | True |
| La puerta de enlace de ATA no pudo validar la cadena de certificados del Centro. | Microsoft.AdvancedThreatAnalytics.1_7.Gateway.FailedToValidateCenterCertificateChain | Microsoft.AdvancedThreatAnalytics.1_7.Gateway | AvailabilityHealth | True | True |
| La puerta de enlace de ATA no tiene suficiente memoria. | Microsoft.AdvancedThreatAnalytics.1_7.Gateway.GatewayDoesNotHaveEnoughMemory | Microsoft.AdvancedThreatAnalytics.1_7.Gateway | AvailabilityHealth | True | True |
| Tamaño máx. de memoria asignada de GatewayUpdaterResourceManager | Microsoft.AdvancedThreatAnalytics.1_7.Gateway.GatewayUpdaterResourceManagerCommitMemoryMaxSize | Microsoft.AdvancedThreatAnalytics.1_7.Gateway | PerformanceCollection | True | False |
| Porcentaje máx. de tiempo de CPU de GatewayUpdaterResourceManager | Microsoft.AdvancedThreatAnalytics.1_7.Gateway.GatewayUpdaterResourceManagerCPUTimeMax_ | Microsoft.AdvancedThreatAnalytics.1_7.Gateway | PerformanceCollection | True | False |
| Tamaño límite de espacio de trabajo de GatewayUpdaterResourceManager | Microsoft.AdvancedThreatAnalytics.1_7.Gateway.GatewayUpdaterResourceManagerWorkingSetLimitSize | Microsoft.AdvancedThreatAnalytics.1_7.Gateway | PerformanceCollection | True | False |
| Hay una entrada de host en el archivo HOSTS que apunta al nombre corto de la máquina. | Microsoft.AdvancedThreatAnalytics.1_7.Gateway.HostEntryInHOSTSFile | Microsoft.AdvancedThreatAnalytics.1_7.Gateway | AvailabilityHealth | True | True |
| Analizador de mensajes está instalado en la puerta de enlace de ATA. | Microsoft.AdvancedThreatAnalytics.1_7.Gateway.MessageAnalyzerIsInstalledOnGateway | Microsoft.AdvancedThreatAnalytics.1_7.Gateway | AvailabilityHealth | True | True |
| Tamaño de bloque 0 de datos de mensaje de NetworkActivityTranslator | Microsoft.AdvancedThreatAnalytics.1_7.Gateway.NetworkActivityTranslatorMessageData0BlockSize | Microsoft.AdvancedThreatAnalytics.1_7.Gateway | PerformanceCollection | True | False |
| Tamaño de bloque 1 de datos de mensaje de NetworkActivityTranslator | Microsoft.AdvancedThreatAnalytics.1_7.Gateway.NetworkActivityTranslatorMessageData1BlockSize | Microsoft.AdvancedThreatAnalytics.1_7.Gateway | PerformanceCollection | True | False |
| Tamaño de bloque 2 de datos de mensaje de NetworkActivityTranslator | Microsoft.AdvancedThreatAnalytics.1_7.Gateway.NetworkActivityTranslatorMessageData2BlockSize | Microsoft.AdvancedThreatAnalytics.1_7.Gateway | PerformanceCollection | True | False |
| Eventos descartados/segundo de ETW de NetworkListener | Microsoft.AdvancedThreatAnalytics.1_7.Gateway.NetworkListenerETWDroppedEvents_Sec | Microsoft.AdvancedThreatAnalytics.1_7.Gateway | PerformanceCollection | True | False |
| Eventos descartados/segundo de PEF de NetworkListener | Microsoft.AdvancedThreatAnalytics.1_7.Gateway.NetworkListenerPEFDroppedEvents_Sec | Microsoft.AdvancedThreatAnalytics.1_7.Gateway | PerformanceCollection | True | False |
| Mensajes analizados/segundo de PEF de NetworkListener | Microsoft.AdvancedThreatAnalytics.1_7.Gateway.NetworkListenerPEFParsedMessages_Sec | Microsoft.AdvancedThreatAnalytics.1_7.Gateway | PerformanceCollection | True | False |
| Hay otras instalaciones pendientes en el equipo. | Microsoft.AdvancedThreatAnalytics.1_7.Gateway.OtherPendingInstallations | Microsoft.AdvancedThreatAnalytics.1_7.Gateway | AvailabilityHealth | True | True |
| PEF (Analizador de mensajes) no se instaló correctamente. | Microsoft.AdvancedThreatAnalytics.1_7.Gateway.PEFWasNotInstalledCorrectly | Microsoft.AdvancedThreatAnalytics.1_7.Gateway | AvailabilityHealth | True | True |
| Se habilitaron PID para los nombres de proceso de la puerta de enlace de ATA. | Microsoft.AdvancedThreatAnalytics.1_7.Gateway.PIDsWasEnabledForProcessNamesInGateway | Microsoft.AdvancedThreatAnalytics.1_7.Gateway | AvailabilityHealth | True | True |
| DisplayName | ID | Target | Accessibility | Category | Enabled | |
|---|---|---|---|---|---|---|
 | Restart ATACenter Service | Microsoft.AdvancedThreatAnalytics.1_7.Center.ATACenter.Restart | Microsoft.AdvancedThreatAnalytics.1_7.Center | Internal | Maintenance | True |
| Start ATACenter Service | Microsoft.AdvancedThreatAnalytics.1_7.Center.ATACenter.Start | Microsoft.AdvancedThreatAnalytics.1_7.Center | Internal | Maintenance | True |
| Stop ATACenter Service | Microsoft.AdvancedThreatAnalytics.1_7.Center.ATACenter.Stop | Microsoft.AdvancedThreatAnalytics.1_7.Center | Internal | Maintenance | True |
| Restart MongoDB Service | Microsoft.AdvancedThreatAnalytics.1_7.Database.MongoDB.Restart | Microsoft.AdvancedThreatAnalytics.1_7.Database | Internal | Maintenance | True |
| Start MongoDB Service | Microsoft.AdvancedThreatAnalytics.1_7.Database.MongoDB.Start | Microsoft.AdvancedThreatAnalytics.1_7.Database | Internal | Maintenance | True |
| Stop MongoDB Service | Microsoft.AdvancedThreatAnalytics.1_7.Database.MongoDB.Stop | Microsoft.AdvancedThreatAnalytics.1_7.Database | Internal | Maintenance | True |
| Restart ATAGateway Service | Microsoft.AdvancedThreatAnalytics.1_7.Gateway.ATAGateway.Restart | Microsoft.AdvancedThreatAnalytics.1_7.Gateway | Internal | Maintenance | True |
| Start ATAGateway Service | Microsoft.AdvancedThreatAnalytics.1_7.Gateway.ATAGateway.Start | Microsoft.AdvancedThreatAnalytics.1_7.Gateway | Internal | Maintenance | True |
| Stop ATAGateway Service | Microsoft.AdvancedThreatAnalytics.1_7.Gateway.ATAGateway.Stop | Microsoft.AdvancedThreatAnalytics.1_7.Gateway | Internal | Maintenance | True |
| Restart ATAGatewayUpdater Service | Microsoft.AdvancedThreatAnalytics.1_7.Gateway.ATAGatewayUpdater.Restart | Microsoft.AdvancedThreatAnalytics.1_7.Gateway | Internal | Maintenance | True |
| Start ATAGatewayUpdater Service | Microsoft.AdvancedThreatAnalytics.1_7.Gateway.ATAGatewayUpdater.Start | Microsoft.AdvancedThreatAnalytics.1_7.Gateway | Internal | Maintenance | True |
| Stop ATAGatewayUpdater Service | Microsoft.AdvancedThreatAnalytics.1_7.Gateway.ATAGatewayUpdater.Stop | Microsoft.AdvancedThreatAnalytics.1_7.Gateway | Internal | Maintenance | True |
| DisplayName | ID | Target | Accessibility | Enabled | |
|---|---|---|---|---|---|
 | Open ATA Center Console Task | Microsoft.AdvancedThreatAnalytics.1_7.Center.ATAConsole.Task | Microsoft.AdvancedThreatAnalytics.1_7.Center | Internal | True |
| ID | FolderName | ElementID | |
|---|---|---|---|
 | Microsoft.AdvancedThreatAnalytics.1_7.Center.SecurityAlerts.FolderItem | Microsoft.AdvancedThreatAnalytics.1_7.Folder.Root | Microsoft.AdvancedThreatAnalytics.1_7.Center.SecurityAlerts |
| Microsoft.AdvancedThreatAnalytics.1_7.HealthAlerts.FolderItem | Microsoft.AdvancedThreatAnalytics.1_7.Folder.Root | Microsoft.AdvancedThreatAnalytics.1_7.HealthAlerts |
| Microsoft.AdvancedThreatAnalytics.1_7.PerformanceAlerts.FolderItem | Microsoft.AdvancedThreatAnalytics.1_7.Folder.Root | Microsoft.AdvancedThreatAnalytics.1_7.PerformanceAlerts |
| Microsoft.AdvancedThreatAnalytics.1_7.StateGrid.FolderItem | Microsoft.AdvancedThreatAnalytics.1_7.Folder.Root | Microsoft.AdvancedThreatAnalytics.1_7.StateGrid |
| DisplayName | ID | ParentFolder | Accessibility | |
|---|---|---|---|---|
| Advanced Threat Analytics 1.7 | Microsoft.AdvancedThreatAnalytics.1_7.Folder.Root | Microsoft.AdvancedThreatAnalytics.Folder.Root | Public |
| DisplayName | ID | ImageID | |
|---|---|---|---|
 | Centro de Advanced Threat Analytics 1.7 | Microsoft.AdvancedThreatAnalytics.1_7.Center | Microsoft.AdvancedThreatAnalytics.Center.Small.Icon |
| Contenedor de puerta de enlace de Advanced Threat Analytics 1.7 | Microsoft.AdvancedThreatAnalytics.1_7.Container.Gateway | Microsoft.AdvancedThreatAnalytics.Container.Gateway.Small.Icon |
| Puerta de enlace ligera de Advanced Threat Analytics 1.7 | Microsoft.AdvancedThreatAnalytics.1_7.Gateway.LightWeight | Microsoft.AdvancedThreatAnalytics.LightweightGateway.Small.Icon |
| Puerta de enlace independiente de Advanced Threat Analytics 1.7 | Microsoft.AdvancedThreatAnalytics.1_7.Gateway.Standalone | Microsoft.AdvancedThreatAnalytics.Gateway.Standalone.Small.Icon |
| Servicio Advanced Threat Analytics 1.7 | Microsoft.AdvancedThreatAnalytics.1_7.Service | Microsoft.AdvancedThreatAnalytics.Service.Small.Icon |
| DisplayName | ID | Target | Type | Accessibility | Visible | |
|---|---|---|---|---|---|---|
 | Alertas de seguridad | Microsoft.AdvancedThreatAnalytics.1_7.Center.SecurityAlerts | Microsoft.AdvancedThreatAnalytics.1_7.Center | Microsoft.SystemCenter.AlertViewType | Internal | True |
| Alertas de estado | Microsoft.AdvancedThreatAnalytics.1_7.HealthAlerts | Microsoft.AdvancedThreatAnalytics.1_7.InstancesGroup | Microsoft.SystemCenter.AlertViewType | Public | True |
| Alertas de rendimiento | Microsoft.AdvancedThreatAnalytics.1_7.PerformanceAlerts | Microsoft.AdvancedThreatAnalytics.1_7.InstancesGroup | Microsoft.SystemCenter.AlertViewType | Public | True |
| ID | Type | Platform | Target | Accessibility | |
|---|---|---|---|---|---|
 | Microsoft.AdvancedThreatAnalytics.1_7.StateGrid.Center.Implementation | Microsoft.AdvancedThreatAnalytics.1_7.StateGrid.Center | Wpf, Silverlight | Public | |
| Microsoft.AdvancedThreatAnalytics.1_7.StateGrid.Details.Implementation | Microsoft.AdvancedThreatAnalytics.1_7.StateGrid.Details | Wpf, Silverlight | Public | |
| Microsoft.AdvancedThreatAnalytics.1_7.StateGrid.Gateway.Implementation | Microsoft.AdvancedThreatAnalytics.1_7.StateGrid.Gateway | Wpf, Silverlight | Public | |
| Microsoft.AdvancedThreatAnalytics.1_7.StateGrid.Implementation | Microsoft.AdvancedThreatAnalytics.1_7.StateGrid | Wpf, Silverlight | Public |
| ID | Type | Parent | Accessibility | |
|---|---|---|---|---|
| Microsoft.AdvancedThreatAnalytics.1_7.StateGrid.Center.Reference | Microsoft.AdvancedThreatAnalytics.1_7.StateGrid.Center | Microsoft.AdvancedThreatAnalytics.1_7.StateGrid | Public |
| Microsoft.AdvancedThreatAnalytics.1_7.StateGrid.Details.Reference | Microsoft.AdvancedThreatAnalytics.1_7.StateGrid.Details | Microsoft.AdvancedThreatAnalytics.1_7.StateGrid | Public |
| Microsoft.AdvancedThreatAnalytics.1_7.StateGrid.Gateway.Reference | Microsoft.AdvancedThreatAnalytics.1_7.StateGrid.Gateway | Microsoft.AdvancedThreatAnalytics.1_7.StateGrid | Public |
| Microsoft.AdvancedThreatAnalytics.1_7.StateGrid.Reference | Microsoft.AdvancedThreatAnalytics.1_7.StateGrid | Microsoft.AdvancedThreatAnalytics.1_7.Folder.Root | Public |
| DisplayName | ID | Accessibility | |
|---|---|---|---|
| Estado de mantenimiento | Microsoft.AdvancedThreatAnalytics.1_7.StateGrid | Public |
| Health State - Center | Microsoft.AdvancedThreatAnalytics.1_7.StateGrid.Center | Public |
| Health State - Details | Microsoft.AdvancedThreatAnalytics.1_7.StateGrid.Details | Public |
| Health State - Gateway | Microsoft.AdvancedThreatAnalytics.1_7.StateGrid.Gateway | Public |
Home
ESN 
Show Management Pack References