| DisplayName | ID | Target | Category | Enabled | Alert Generate |
![Microsoft.AdvancedThreatAnalytics.1_7.Center.AbnormalBehaviorSuspiciousActivity](/images/Rule.png) | Podejrzane działanie związane z nietypowym zachowaniem | Microsoft.AdvancedThreatAnalytics.1_7.Center.AbnormalBehaviorSuspiciousActivity | Microsoft.AdvancedThreatAnalytics.1_7.Center | SecurityHealth | False | True |
![Microsoft.AdvancedThreatAnalytics.1_7.Center.AbnormalSmbSuspiciousActivity](/images/Rule.png) | Podejrzane działanie związane z nietypowym elementem SMB | Microsoft.AdvancedThreatAnalytics.1_7.Center.AbnormalSmbSuspiciousActivity | Microsoft.AdvancedThreatAnalytics.1_7.Center | SecurityHealth | False | True |
![Microsoft.AdvancedThreatAnalytics.1_7.Center.AccountEnumerationSuspiciousActivity](/images/Rule.png) | Podejrzane działanie związane z wyliczeniem konta | Microsoft.AdvancedThreatAnalytics.1_7.Center.AccountEnumerationSuspiciousActivity | Microsoft.AdvancedThreatAnalytics.1_7.Center | SecurityHealth | False | True |
![Microsoft.AdvancedThreatAnalytics.1_7.Center.BruteForceSuspiciousActivity](/images/Rule.png) | Podejrzane działanie związane z atakiem metodą pełnego przeglądu | Microsoft.AdvancedThreatAnalytics.1_7.Center.BruteForceSuspiciousActivity | Microsoft.AdvancedThreatAnalytics.1_7.Center | SecurityHealth | False | True |
![Microsoft.AdvancedThreatAnalytics.1_7.Center.CenterDatabaseDataDriveFreeSpaceMonitoringAlert](/images/Rule.png) | Alert dotyczący monitorowania wolnego miejsca na dysku danych bazy danych centrum | Microsoft.AdvancedThreatAnalytics.1_7.Center.CenterDatabaseDataDriveFreeSpaceMonitoringAlert | Microsoft.AdvancedThreatAnalytics.1_7.Center | AvailabilityHealth | True | True |
![Microsoft.AdvancedThreatAnalytics.1_7.Center.CenterOverloadedMonitoringAlert](/images/Rule.png) | Alert dotyczący monitorowania przeciążonego centrum | Microsoft.AdvancedThreatAnalytics.1_7.Center.CenterOverloadedMonitoringAlert | Microsoft.AdvancedThreatAnalytics.1_7.Center | PerformanceHealth | True | True |
![Microsoft.AdvancedThreatAnalytics.1_7.Center.CertificateExpiryMonitoringAlert](/images/Rule.png) | Alert dotyczący monitorowania wygaśnięcia certyfikatu | Microsoft.AdvancedThreatAnalytics.1_7.Center.CertificateExpiryMonitoringAlert | Microsoft.AdvancedThreatAnalytics.1_7.Center | ConfigurationHealth | True | True |
![Microsoft.AdvancedThreatAnalytics.1_7.Center.ComputerPreauthenticationFailedSuspiciousActivity](/images/Rule.png) | Podejrzane działanie związane z niepowodzeniem wstępnego uwierzytelniania komputera | Microsoft.AdvancedThreatAnalytics.1_7.Center.ComputerPreauthenticationFailedSuspiciousActivity | Microsoft.AdvancedThreatAnalytics.1_7.Center | SecurityHealth | False | True |
![Microsoft.AdvancedThreatAnalytics.1_7.Center.DatabaseAtSvcBlockSize](/images/Rule.png) | Rozmiar bloku AtSVC bazy danych | Microsoft.AdvancedThreatAnalytics.1_7.Center.DatabaseAtSvcBlockSize | Microsoft.AdvancedThreatAnalytics.1_7.Center | PerformanceCollection | True | False |
![Microsoft.AdvancedThreatAnalytics.1_7.Center.DatabaseDirectoryServicesActivityBlockSize](/images/Rule.png) | Rozmiar bloku DirectoryServicesActivity bazy danych | Microsoft.AdvancedThreatAnalytics.1_7.Center.DatabaseDirectoryServicesActivityBlockSize | Microsoft.AdvancedThreatAnalytics.1_7.Center | PerformanceCollection | True | False |
![Microsoft.AdvancedThreatAnalytics.1_7.Center.DatabaseDisconnectedMonitoringAlert](/images/Rule.png) | Alert dotyczący monitorowania rozłączonej bazy danych | Microsoft.AdvancedThreatAnalytics.1_7.Center.DatabaseDisconnectedMonitoringAlert | Microsoft.AdvancedThreatAnalytics.1_7.Center | AvailabilityHealth | True | True |
![Microsoft.AdvancedThreatAnalytics.1_7.Center.DatabaseDnsBlockSize](/images/Rule.png) | Rozmiar bloku DNS bazy danych | Microsoft.AdvancedThreatAnalytics.1_7.Center.DatabaseDnsBlockSize | Microsoft.AdvancedThreatAnalytics.1_7.Center | PerformanceCollection | True | False |
![Microsoft.AdvancedThreatAnalytics.1_7.Center.DatabaseDrsrBlockSize](/images/Rule.png) | Rozmiar bloku DRSR bazy danych | Microsoft.AdvancedThreatAnalytics.1_7.Center.DatabaseDrsrBlockSize | Microsoft.AdvancedThreatAnalytics.1_7.Center | PerformanceCollection | True | False |
![Microsoft.AdvancedThreatAnalytics.1_7.Center.DatabaseKerberosApBlockSize](/images/Rule.png) | Rozmiar bloku KerberosAP bazy danych | Microsoft.AdvancedThreatAnalytics.1_7.Center.DatabaseKerberosApBlockSize | Microsoft.AdvancedThreatAnalytics.1_7.Center | PerformanceCollection | True | False |
![Microsoft.AdvancedThreatAnalytics.1_7.Center.DatabaseKerberosAsBlockSize](/images/Rule.png) | Rozmiar bloku KerberosAS bazy danych | Microsoft.AdvancedThreatAnalytics.1_7.Center.DatabaseKerberosAsBlockSize | Microsoft.AdvancedThreatAnalytics.1_7.Center | PerformanceCollection | True | False |
![Microsoft.AdvancedThreatAnalytics.1_7.Center.DatabaseKerberosTgsBlockSize](/images/Rule.png) | Rozmiar bloku KerberosTSG bazy danych | Microsoft.AdvancedThreatAnalytics.1_7.Center.DatabaseKerberosTgsBlockSize | Microsoft.AdvancedThreatAnalytics.1_7.Center | PerformanceCollection | True | False |
![Microsoft.AdvancedThreatAnalytics.1_7.Center.DatabaseLdapBlockSize](/images/Rule.png) | Rozmiar bloku LDAP bazy danych | Microsoft.AdvancedThreatAnalytics.1_7.Center.DatabaseLdapBlockSize | Microsoft.AdvancedThreatAnalytics.1_7.Center | PerformanceCollection | True | False |
![Microsoft.AdvancedThreatAnalytics.1_7.Center.DatabaseLsaRpcBlockSize](/images/Rule.png) | Rozmiar bloku LsaRPC bazy danych | Microsoft.AdvancedThreatAnalytics.1_7.Center.DatabaseLsaRpcBlockSize | Microsoft.AdvancedThreatAnalytics.1_7.Center | PerformanceCollection | True | False |
![Microsoft.AdvancedThreatAnalytics.1_7.Center.DatabaseNetlogonBlockSize](/images/Rule.png) | Rozmiar bloku Netlogon bazy danych | Microsoft.AdvancedThreatAnalytics.1_7.Center.DatabaseNetlogonBlockSize | Microsoft.AdvancedThreatAnalytics.1_7.Center | PerformanceCollection | True | False |
![Microsoft.AdvancedThreatAnalytics.1_7.Center.DatabaseNtlmBlockSize](/images/Rule.png) | Rozmiar bloku NTLM bazy danych | Microsoft.AdvancedThreatAnalytics.1_7.Center.DatabaseNtlmBlockSize | Microsoft.AdvancedThreatAnalytics.1_7.Center | PerformanceCollection | True | False |
![Microsoft.AdvancedThreatAnalytics.1_7.Center.DatabaseNtlmEventBlockSize](/images/Rule.png) | Rozmiar bloku NTLMEvent bazy danych | Microsoft.AdvancedThreatAnalytics.1_7.Center.DatabaseNtlmEventBlockSize | Microsoft.AdvancedThreatAnalytics.1_7.Center | PerformanceCollection | True | False |
![Microsoft.AdvancedThreatAnalytics.1_7.Center.DatabaseServiceControlBlockSize](/images/Rule.png) | Rozmiar bloku ServiceControl bazy danych | Microsoft.AdvancedThreatAnalytics.1_7.Center.DatabaseServiceControlBlockSize | Microsoft.AdvancedThreatAnalytics.1_7.Center | PerformanceCollection | True | False |
![Microsoft.AdvancedThreatAnalytics.1_7.Center.DatabaseSmbBlockSize](/images/Rule.png) | Rozmiar bloku SMB bazy danych | Microsoft.AdvancedThreatAnalytics.1_7.Center.DatabaseSmbBlockSize | Microsoft.AdvancedThreatAnalytics.1_7.Center | PerformanceCollection | True | False |
![Microsoft.AdvancedThreatAnalytics.1_7.Center.DatabaseSrvSvcBlockSize](/images/Rule.png) | Rozmiar bloku SrvSVC bazy danych | Microsoft.AdvancedThreatAnalytics.1_7.Center.DatabaseSrvSvcBlockSize | Microsoft.AdvancedThreatAnalytics.1_7.Center | PerformanceCollection | True | False |
![Microsoft.AdvancedThreatAnalytics.1_7.Center.DatabaseTaskSchedulerBlockSize](/images/Rule.png) | Rozmiar bloku TaskScheduler bazy danych | Microsoft.AdvancedThreatAnalytics.1_7.Center.DatabaseTaskSchedulerBlockSize | Microsoft.AdvancedThreatAnalytics.1_7.Center | PerformanceCollection | True | False |
![Microsoft.AdvancedThreatAnalytics.1_7.Center.DirectoryServicesClientAccountPasswordExpiryMonitoringAlert](/images/Rule.png) | Usługi katalogowe — alert monitorowania wygaśnięcia hasła konta klienta | Microsoft.AdvancedThreatAnalytics.1_7.Center.DirectoryServicesClientAccountPasswordExpiryMonitoringAlert | Microsoft.AdvancedThreatAnalytics.1_7.Center | ConfigurationHealth | True | True |
![Microsoft.AdvancedThreatAnalytics.1_7.Center.DirectoryServicesReplicationSuspiciousActivity](/images/Rule.png) | Podejrzane działanie związane z replikacją usług katalogowych | Microsoft.AdvancedThreatAnalytics.1_7.Center.DirectoryServicesReplicationSuspiciousActivity | Microsoft.AdvancedThreatAnalytics.1_7.Center | SecurityHealth | False | True |
![Microsoft.AdvancedThreatAnalytics.1_7.Center.DnsReconnaissanceSuspiciousActivity](/images/Rule.png) | Podejrzane działanie związane z rozpoznaniem usługi DNS | Microsoft.AdvancedThreatAnalytics.1_7.Center.DnsReconnaissanceSuspiciousActivity | Microsoft.AdvancedThreatAnalytics.1_7.Center | SecurityHealth | False | True |
![Microsoft.AdvancedThreatAnalytics.1_7.Center.DomainSynchronizerNotAssignedMonitoringAlert](/images/Rule.png) | Alert dotyczący monitorowania nieprzypisanego synchronizatora domeny | Microsoft.AdvancedThreatAnalytics.1_7.Center.DomainSynchronizerNotAssignedMonitoringAlert | Microsoft.AdvancedThreatAnalytics.1_7.Center | ConfigurationHealth | True | True |
![Microsoft.AdvancedThreatAnalytics.1_7.Center.EncryptionDowngradeSuspiciousActivity](/images/Rule.png) | Podejrzane działanie związane ze zmianą szyfrowania na niższą wersję | Microsoft.AdvancedThreatAnalytics.1_7.Center.EncryptionDowngradeSuspiciousActivity | Microsoft.AdvancedThreatAnalytics.1_7.Center | SecurityHealth | False | True |
![Microsoft.AdvancedThreatAnalytics.1_7.Center.EncryptionDowngradeSuspiciousActivity_GoldenTicket](/images/Rule.png) | Podejrzane działanie związane ze zmianą szyfrowania na niższą wersję (atak metodą złotego biletu) | Microsoft.AdvancedThreatAnalytics.1_7.Center.EncryptionDowngradeSuspiciousActivity_GoldenTicket | Microsoft.AdvancedThreatAnalytics.1_7.Center | SecurityHealth | False | True |
![Microsoft.AdvancedThreatAnalytics.1_7.Center.EncryptionDowngradeSuspiciousActivity_OverpasstheHash](/images/Rule.png) | Podejrzane działanie związane ze zmianą szyfrowania na niższą wersję (pomijanie skrótu) | Microsoft.AdvancedThreatAnalytics.1_7.Center.EncryptionDowngradeSuspiciousActivity_OverpasstheHash | Microsoft.AdvancedThreatAnalytics.1_7.Center | SecurityHealth | False | True |
![Microsoft.AdvancedThreatAnalytics.1_7.Center.EncryptionDowngradeSuspiciousActivity_SkeletonKey](/images/Rule.png) | Podejrzane działanie związane ze zmianą szyfrowania na niższą wersję (wytrych) | Microsoft.AdvancedThreatAnalytics.1_7.Center.EncryptionDowngradeSuspiciousActivity_SkeletonKey | Microsoft.AdvancedThreatAnalytics.1_7.Center | SecurityHealth | False | True |
![Microsoft.AdvancedThreatAnalytics.1_7.Center.EntityProfilerNetworkActivityBlockSize](/images/Rule.png) | Rozmiar bloku działania w sieci elementu EntityProfiler | Microsoft.AdvancedThreatAnalytics.1_7.Center.EntityProfilerNetworkActivityBlockSize | Microsoft.AdvancedThreatAnalytics.1_7.Center | PerformanceCollection | True | False |
![Microsoft.AdvancedThreatAnalytics.1_7.Center.EntityReceiverEntityBatchBlockSize](/images/Rule.png) | Rozmiar bloku partii jednostek EntityReceiver | Microsoft.AdvancedThreatAnalytics.1_7.Center.EntityReceiverEntityBatchBlockSize | Microsoft.AdvancedThreatAnalytics.1_7.Center | PerformanceCollection | True | False |
![Microsoft.AdvancedThreatAnalytics.1_7.Center.EnumerateSessionsSuspiciousActivity](/images/Rule.png) | Podejrzane działanie związane z wyliczaniem sesji | Microsoft.AdvancedThreatAnalytics.1_7.Center.EnumerateSessionsSuspiciousActivity | Microsoft.AdvancedThreatAnalytics.1_7.Center | SecurityHealth | False | True |
![Microsoft.AdvancedThreatAnalytics.1_7.Center.ForgedPacSuspiciousActivity](/images/Rule.png) | Podejrzane działanie związane ze sfałszowanym certyfikatem PAC | Microsoft.AdvancedThreatAnalytics.1_7.Center.ForgedPacSuspiciousActivity | Microsoft.AdvancedThreatAnalytics.1_7.Center | SecurityHealth | False | True |
![Microsoft.AdvancedThreatAnalytics.1_7.Center.GatewayCaptureNetworkAdapterFaultedMonitoringAlert](/images/Rule.png) | Alert dotyczący monitorowania błędów karty sieciowej przechwytywania bramy | Microsoft.AdvancedThreatAnalytics.1_7.Center.GatewayCaptureNetworkAdapterFaultedMonitoringAlert | Microsoft.AdvancedThreatAnalytics.1_7.Center | AvailabilityHealth | True | True |
![Microsoft.AdvancedThreatAnalytics.1_7.Center.GatewayCaptureNetworkAdapterMissingMonitoringAlert](/images/Rule.png) | Alert dotyczący monitorowania brakującej karty sieciowej przechwytywania bramy | Microsoft.AdvancedThreatAnalytics.1_7.Center.GatewayCaptureNetworkAdapterMissingMonitoringAlert | Microsoft.AdvancedThreatAnalytics.1_7.Center | ConfigurationHealth | True | True |
![Microsoft.AdvancedThreatAnalytics.1_7.Center.GatewayDirectoryServicesClientConnectivityMonitoringAlert](/images/Rule.png) | Usługi katalogowe bramy — alert monitorowania łączności klienta | Microsoft.AdvancedThreatAnalytics.1_7.Center.GatewayDirectoryServicesClientConnectivityMonitoringAlert | Microsoft.AdvancedThreatAnalytics.1_7.Center | AvailabilityHealth | True | True |
![Microsoft.AdvancedThreatAnalytics.1_7.Center.GatewayDisconnectedMonitoringAlert](/images/Rule.png) | Alert dotyczący monitorowania rozłączonej bramy | Microsoft.AdvancedThreatAnalytics.1_7.Center.GatewayDisconnectedMonitoringAlert | Microsoft.AdvancedThreatAnalytics.1_7.Center | AvailabilityHealth | True | True |
![Microsoft.AdvancedThreatAnalytics.1_7.Center.GatewayLowMemoryMonitoringAlert](/images/Rule.png) | Alert dotyczący monitorowania małej ilości pamięci bramy | Microsoft.AdvancedThreatAnalytics.1_7.Center.GatewayLowMemoryMonitoringAlert | Microsoft.AdvancedThreatAnalytics.1_7.Center | PerformanceHealth | True | True |
![Microsoft.AdvancedThreatAnalytics.1_7.Center.GatewayNotReceivingTrafficMonitoringAlert](/images/Rule.png) | Alert dotyczący monitorowania braku ruchu odbieranego przez bramę | Microsoft.AdvancedThreatAnalytics.1_7.Center.GatewayNotReceivingTrafficMonitoringAlert | Microsoft.AdvancedThreatAnalytics.1_7.Center | AvailabilityHealth | True | True |
![Microsoft.AdvancedThreatAnalytics.1_7.Center.GatewayOverloadedEventActivitiesMonitoringAlert](/images/Rule.png) | Alert dotyczący monitorowania działań zdarzenia przeciążonej bramy | Microsoft.AdvancedThreatAnalytics.1_7.Center.GatewayOverloadedEventActivitiesMonitoringAlert | Microsoft.AdvancedThreatAnalytics.1_7.Center | PerformanceHealth | True | True |
![Microsoft.AdvancedThreatAnalytics.1_7.Center.GatewayOverloadedNetworkActivitiesMonitoringAlert](/images/Rule.png) | Alert dotyczący monitorowania działań w sieci przeciążonej bramy | Microsoft.AdvancedThreatAnalytics.1_7.Center.GatewayOverloadedNetworkActivitiesMonitoringAlert | Microsoft.AdvancedThreatAnalytics.1_7.Center | PerformanceHealth | True | True |
![Microsoft.AdvancedThreatAnalytics.1_7.Center.GatewaysOutdatedMonitoringAlert](/images/Rule.png) | Alert dotyczący monitorowania nieaktualnych bram | Microsoft.AdvancedThreatAnalytics.1_7.Center.GatewaysOutdatedMonitoringAlert | Microsoft.AdvancedThreatAnalytics.1_7.Center | ConfigurationHealth | True | True |
![Microsoft.AdvancedThreatAnalytics.1_7.Center.GatewayStartFailureMonitoringAlert](/images/Rule.png) | Alert dotyczący monitorowania niepowodzenia uruchomienia bramy | Microsoft.AdvancedThreatAnalytics.1_7.Center.GatewayStartFailureMonitoringAlert | Microsoft.AdvancedThreatAnalytics.1_7.Center | AvailabilityHealth | True | True |
![Microsoft.AdvancedThreatAnalytics.1_7.Center.HoneytokenActivitySuspiciousActivity](/images/Rule.png) | Podejrzane działanie związane z użyciem informacji jako przynęty | Microsoft.AdvancedThreatAnalytics.1_7.Center.HoneytokenActivitySuspiciousActivity | Microsoft.AdvancedThreatAnalytics.1_7.Center | SecurityHealth | False | True |
![Microsoft.AdvancedThreatAnalytics.1_7.Center.LdapSimpleBindCleartextPasswordSuspiciousActivity](/images/Rule.png) | Podejrzane działanie związane z hasłem w postaci zwykłego tekstu prostego powiązania LDAP | Microsoft.AdvancedThreatAnalytics.1_7.Center.LdapSimpleBindCleartextPasswordSuspiciousActivity | Microsoft.AdvancedThreatAnalytics.1_7.Center | SecurityHealth | False | True |
![Microsoft.AdvancedThreatAnalytics.1_7.Center.MailMonitoringAlert](/images/Rule.png) | Alert dotyczący monitorowania poczty | Microsoft.AdvancedThreatAnalytics.1_7.Center.MailMonitoringAlert | Microsoft.AdvancedThreatAnalytics.1_7.Center | ConfigurationHealth | True | True |
![Microsoft.AdvancedThreatAnalytics.1_7.Center.MassiveObjectDeletionSuspiciousActivity](/images/Rule.png) | Podejrzane działanie związane z usuwaniem dużego obiektu | Microsoft.AdvancedThreatAnalytics.1_7.Center.MassiveObjectDeletionSuspiciousActivity | Microsoft.AdvancedThreatAnalytics.1_7.Center | SecurityHealth | False | True |
![Microsoft.AdvancedThreatAnalytics.1_7.Center.NetworkActivityProcessorNetworkActivityBlockSize](/images/Rule.png) | Rozmiar bloku działania w sieci elementu NetworkActivityProcessor | Microsoft.AdvancedThreatAnalytics.1_7.Center.NetworkActivityProcessorNetworkActivityBlockSize | Microsoft.AdvancedThreatAnalytics.1_7.Center | PerformanceCollection | True | False |
![Microsoft.AdvancedThreatAnalytics.1_7.Center.PassTheHashSuspiciousActivity](/images/Rule.png) | Podejrzane działanie związane z przekazywaniem skrótu | Microsoft.AdvancedThreatAnalytics.1_7.Center.PassTheHashSuspiciousActivity | Microsoft.AdvancedThreatAnalytics.1_7.Center | SecurityHealth | False | True |
![Microsoft.AdvancedThreatAnalytics.1_7.Center.PassTheTicketSuspiciousActivity](/images/Rule.png) | Podejrzane działanie związane z przekazywaniem biletu | Microsoft.AdvancedThreatAnalytics.1_7.Center.PassTheTicketSuspiciousActivity | Microsoft.AdvancedThreatAnalytics.1_7.Center | SecurityHealth | False | True |
![Microsoft.AdvancedThreatAnalytics.1_7.Center.RemoteExecutionSuspiciousActivity](/images/Rule.png) | Podejrzane działanie związane z wykonywaniem zdalnym | Microsoft.AdvancedThreatAnalytics.1_7.Center.RemoteExecutionSuspiciousActivity | Microsoft.AdvancedThreatAnalytics.1_7.Center | SecurityHealth | False | True |
![Microsoft.AdvancedThreatAnalytics.1_7.Center.RetrieveDataProtectionBackupKeySuspiciousActivity](/images/Rule.png) | Podejrzane działanie związane z pobieraniem klucza kopii zapasowej na potrzeby ochrony danych | Microsoft.AdvancedThreatAnalytics.1_7.Center.RetrieveDataProtectionBackupKeySuspiciousActivity | Microsoft.AdvancedThreatAnalytics.1_7.Center | SecurityHealth | False | True |
![Microsoft.AdvancedThreatAnalytics.1_7.Center.SamrReconnaissanceSuspiciousActivity](/images/Rule.png) | Podejrzane działanie związane z rozpoznaniem elementu SAMR | Microsoft.AdvancedThreatAnalytics.1_7.Center.SamrReconnaissanceSuspiciousActivity | Microsoft.AdvancedThreatAnalytics.1_7.Center | SecurityHealth | False | True |
![Microsoft.AdvancedThreatAnalytics.1_7.Center.SyslogMonitoringAlert](/images/Rule.png) | Alert dotyczący monitorowania usługi Syslog | Microsoft.AdvancedThreatAnalytics.1_7.Center.SyslogMonitoringAlert | Microsoft.AdvancedThreatAnalytics.1_7.Center | ConfigurationHealth | True | True |
![Microsoft.AdvancedThreatAnalytics.1_7.Gateway.ActiveDirectoryAuthenticationFailure](/images/Rule.png) | Nie można uwierzytelnić bramy usługi ATA w kontrolerze domeny | Microsoft.AdvancedThreatAnalytics.1_7.Gateway.ActiveDirectoryAuthenticationFailure | Microsoft.AdvancedThreatAnalytics.1_7.Gateway | AvailabilityHealth | True | True |
![Microsoft.AdvancedThreatAnalytics.1_7.Gateway.CountersDisabled](/images/Rule.png) | Liczniki mogą być wyłączone w rejestrze | Microsoft.AdvancedThreatAnalytics.1_7.Gateway.CountersDisabled | Microsoft.AdvancedThreatAnalytics.1_7.Gateway | AvailabilityHealth | True | True |
![Microsoft.AdvancedThreatAnalytics.1_7.Gateway.EntityResolverActivityBlockSize](/images/Rule.png) | Rozmiar bloku działania elementu EntityResolver | Microsoft.AdvancedThreatAnalytics.1_7.Gateway.EntityResolverActivityBlockSize | Microsoft.AdvancedThreatAnalytics.1_7.Gateway | PerformanceCollection | True | False |
![Microsoft.AdvancedThreatAnalytics.1_7.Gateway.EntitySenderEntityBatchBlockSize](/images/Rule.png) | Rozmiar bloku partii jednostek EntitySender | Microsoft.AdvancedThreatAnalytics.1_7.Gateway.EntitySenderEntityBatchBlockSize | Microsoft.AdvancedThreatAnalytics.1_7.Gateway | PerformanceCollection | True | False |
![Microsoft.AdvancedThreatAnalytics.1_7.Gateway.EntitySenderEntityBatchSendTime](/images/Rule.png) | Czas wysłania partii jednostek elementu EntitySender | Microsoft.AdvancedThreatAnalytics.1_7.Gateway.EntitySenderEntityBatchSendTime | Microsoft.AdvancedThreatAnalytics.1_7.Gateway | PerformanceCollection | True | False |
![Microsoft.AdvancedThreatAnalytics.1_7.Gateway.FailedToAuthenticateAgainstCenter](/images/Rule.png) | Nie można uwierzytelnić bramy usługi ATA w centrum | Microsoft.AdvancedThreatAnalytics.1_7.Gateway.FailedToAuthenticateAgainstCenter | Microsoft.AdvancedThreatAnalytics.1_7.Gateway | AvailabilityHealth | True | True |
![Microsoft.AdvancedThreatAnalytics.1_7.Gateway.FailedToEstablishConnectionToCenter](/images/Rule.png) | Brama usługi ATA nie może nawiązać połączenia z centrum usługi ATA | Microsoft.AdvancedThreatAnalytics.1_7.Gateway.FailedToEstablishConnectionToCenter | Microsoft.AdvancedThreatAnalytics.1_7.Gateway | AvailabilityHealth | True | True |
![Microsoft.AdvancedThreatAnalytics.1_7.Gateway.FailedToParseSyslog](/images/Rule.png) | Brama usługi ATA nie może przeanalizować komunikatu usługi Syslog SIEM | Microsoft.AdvancedThreatAnalytics.1_7.Gateway.FailedToParseSyslog | Microsoft.AdvancedThreatAnalytics.1_7.Gateway | AvailabilityHealth | True | True |
![Microsoft.AdvancedThreatAnalytics.1_7.Gateway.FailedToQueryDCUsingLDAPProtocol](/images/Rule.png) | Brama usługi ATA nie może wykonać zapytania dla kontrolera domeny przy użyciu protokołu LDAP | Microsoft.AdvancedThreatAnalytics.1_7.Gateway.FailedToQueryDCUsingLDAPProtocol | Microsoft.AdvancedThreatAnalytics.1_7.Gateway | AvailabilityHealth | True | True |
![Microsoft.AdvancedThreatAnalytics.1_7.Gateway.FailedToSynchronizeConfigurationFromCenter](/images/Rule.png) | Brama usługi ATA nie może zsynchronizować konfiguracji pochodzącej z centrum usługi ATA | Microsoft.AdvancedThreatAnalytics.1_7.Gateway.FailedToSynchronizeConfigurationFromCenter | Microsoft.AdvancedThreatAnalytics.1_7.Gateway | AvailabilityHealth | True | True |
![Microsoft.AdvancedThreatAnalytics.1_7.Gateway.FailedToValidateCenterCertificateChain](/images/Rule.png) | Brama usługi ATA nie może zweryfikować łańcucha certyfikatów centrum | Microsoft.AdvancedThreatAnalytics.1_7.Gateway.FailedToValidateCenterCertificateChain | Microsoft.AdvancedThreatAnalytics.1_7.Gateway | AvailabilityHealth | True | True |
![Microsoft.AdvancedThreatAnalytics.1_7.Gateway.GatewayDoesNotHaveEnoughMemory](/images/Rule.png) | Brama usługi ATA ma za mało pamięci | Microsoft.AdvancedThreatAnalytics.1_7.Gateway.GatewayDoesNotHaveEnoughMemory | Microsoft.AdvancedThreatAnalytics.1_7.Gateway | AvailabilityHealth | True | True |
![Microsoft.AdvancedThreatAnalytics.1_7.Gateway.GatewayUpdaterResourceManagerCommitMemoryMaxSize](/images/Rule.png) | Maksymalny rozmiar pamięci zatwierdzania elementu GatewayUpdaterResourceManager | Microsoft.AdvancedThreatAnalytics.1_7.Gateway.GatewayUpdaterResourceManagerCommitMemoryMaxSize | Microsoft.AdvancedThreatAnalytics.1_7.Gateway | PerformanceCollection | True | False |
![Microsoft.AdvancedThreatAnalytics.1_7.Gateway.GatewayUpdaterResourceManagerCPUTimeMax_](/images/Rule.png) | Maksymalny procent czasu procesora CPU elementu GatewayUpdaterResourceManager | Microsoft.AdvancedThreatAnalytics.1_7.Gateway.GatewayUpdaterResourceManagerCPUTimeMax_ | Microsoft.AdvancedThreatAnalytics.1_7.Gateway | PerformanceCollection | True | False |
![Microsoft.AdvancedThreatAnalytics.1_7.Gateway.GatewayUpdaterResourceManagerWorkingSetLimitSize](/images/Rule.png) | Rozmiar limitu zestawu roboczego elementu GatewayUpdaterResourceManager | Microsoft.AdvancedThreatAnalytics.1_7.Gateway.GatewayUpdaterResourceManagerWorkingSetLimitSize | Microsoft.AdvancedThreatAnalytics.1_7.Gateway | PerformanceCollection | True | False |
![Microsoft.AdvancedThreatAnalytics.1_7.Gateway.HostEntryInHOSTSFile](/images/Rule.png) | W pliku HOSTS istnieje wpis hosta wskazujący krótką nazwę maszyny | Microsoft.AdvancedThreatAnalytics.1_7.Gateway.HostEntryInHOSTSFile | Microsoft.AdvancedThreatAnalytics.1_7.Gateway | AvailabilityHealth | True | True |
![Microsoft.AdvancedThreatAnalytics.1_7.Gateway.MessageAnalyzerIsInstalledOnGateway](/images/Rule.png) | Analizator komunikatów jest zainstalowany na bramie usługi ATA | Microsoft.AdvancedThreatAnalytics.1_7.Gateway.MessageAnalyzerIsInstalledOnGateway | Microsoft.AdvancedThreatAnalytics.1_7.Gateway | AvailabilityHealth | True | True |
![Microsoft.AdvancedThreatAnalytics.1_7.Gateway.NetworkActivityTranslatorMessageData0BlockSize](/images/Rule.png) | Rozmiar bloku 0 danych komunikatu elementu NetworkActivityTranslator | Microsoft.AdvancedThreatAnalytics.1_7.Gateway.NetworkActivityTranslatorMessageData0BlockSize | Microsoft.AdvancedThreatAnalytics.1_7.Gateway | PerformanceCollection | True | False |
![Microsoft.AdvancedThreatAnalytics.1_7.Gateway.NetworkActivityTranslatorMessageData1BlockSize](/images/Rule.png) | Rozmiar bloku 1 danych komunikatu elementu NetworkActivityTranslator | Microsoft.AdvancedThreatAnalytics.1_7.Gateway.NetworkActivityTranslatorMessageData1BlockSize | Microsoft.AdvancedThreatAnalytics.1_7.Gateway | PerformanceCollection | True | False |
![Microsoft.AdvancedThreatAnalytics.1_7.Gateway.NetworkActivityTranslatorMessageData2BlockSize](/images/Rule.png) | Rozmiar bloku 2 danych komunikatu elementu NetworkActivityTranslator | Microsoft.AdvancedThreatAnalytics.1_7.Gateway.NetworkActivityTranslatorMessageData2BlockSize | Microsoft.AdvancedThreatAnalytics.1_7.Gateway | PerformanceCollection | True | False |
![Microsoft.AdvancedThreatAnalytics.1_7.Gateway.NetworkListenerETWDroppedEvents_Sec](/images/Rule.png) | Liczba zdarzeń ETW porzucanych przez składnik NetworkListener na sekundę | Microsoft.AdvancedThreatAnalytics.1_7.Gateway.NetworkListenerETWDroppedEvents_Sec | Microsoft.AdvancedThreatAnalytics.1_7.Gateway | PerformanceCollection | True | False |
![Microsoft.AdvancedThreatAnalytics.1_7.Gateway.NetworkListenerPEFDroppedEvents_Sec](/images/Rule.png) | Liczba zdarzeń PEF porzucanych przez składnik NetworkListener na sekundę | Microsoft.AdvancedThreatAnalytics.1_7.Gateway.NetworkListenerPEFDroppedEvents_Sec | Microsoft.AdvancedThreatAnalytics.1_7.Gateway | PerformanceCollection | True | False |
![Microsoft.AdvancedThreatAnalytics.1_7.Gateway.NetworkListenerPEFParsedMessages_Sec](/images/Rule.png) | Przeanalizowane komunikaty platformy PEF elementu NetworkListener/s | Microsoft.AdvancedThreatAnalytics.1_7.Gateway.NetworkListenerPEFParsedMessages_Sec | Microsoft.AdvancedThreatAnalytics.1_7.Gateway | PerformanceCollection | True | False |
![Microsoft.AdvancedThreatAnalytics.1_7.Gateway.OtherPendingInstallations](/images/Rule.png) | Na komputerze istnieją inne oczekujące instalacje | Microsoft.AdvancedThreatAnalytics.1_7.Gateway.OtherPendingInstallations | Microsoft.AdvancedThreatAnalytics.1_7.Gateway | AvailabilityHealth | True | True |
![Microsoft.AdvancedThreatAnalytics.1_7.Gateway.PEFWasNotInstalledCorrectly](/images/Rule.png) | Platforma PEF (analizator komunikatów) nie została poprawnie zainstalowana | Microsoft.AdvancedThreatAnalytics.1_7.Gateway.PEFWasNotInstalledCorrectly | Microsoft.AdvancedThreatAnalytics.1_7.Gateway | AvailabilityHealth | True | True |
![Microsoft.AdvancedThreatAnalytics.1_7.Gateway.PIDsWasEnabledForProcessNamesInGateway](/images/Rule.png) | Włączono identyfikatory PID dla nazw procesów w bramie usługi ATA | Microsoft.AdvancedThreatAnalytics.1_7.Gateway.PIDsWasEnabledForProcessNamesInGateway | Microsoft.AdvancedThreatAnalytics.1_7.Gateway | AvailabilityHealth | True | True |