Microsoft Advanced Threat Analytics 1.8 语言包

Microsoft.AdvancedThreatAnalytics.1_8 :: 1.9.0.0 (Management Pack)

Microsoft Advanced Threat Analytics 1.8 的管理包

• Show Management Pack XML
• Get Management Pack data in Excel format
• Microsoft.AdvancedThreatAnalytics.1_8.mpb

Management Pack Elements

Classes (11)

	DisplayName	ID	Base Class	Abstract	Hosted	Singleton	Group	Extension	Accessibility
	Advanced Threat Analytics 1.8 中心	Microsoft.AdvancedThreatAnalytics.1_8.Center	Microsoft.Windows.ComputerRole	False	True	False	False	False	Public
	Advanced Threat Analytics 1.8 网关容器	Microsoft.AdvancedThreatAnalytics.1_8.Container.Gateway	Microsoft.AdvancedThreatAnalytics.ServiceComponent	False	False	False	False	False	Public
	Advanced Threat Analytics 1.8 数据库	Microsoft.AdvancedThreatAnalytics.1_8.Database	System.Database	False	True	False	False	False	Public
	Advanced Threat Analytics 1.8 网关	Microsoft.AdvancedThreatAnalytics.1_8.Gateway	Microsoft.Windows.ComputerRole	True	True	False	False	False	Public
	Advanced Threat Analytics 1.8 轻型网关	Microsoft.AdvancedThreatAnalytics.1_8.Gateway.LightWeight	Microsoft.AdvancedThreatAnalytics.1_8.Gateway	False	True	False	False	False	Public
	Advanced Threat Analytics 1.8 独立网关	Microsoft.AdvancedThreatAnalytics.1_8.Gateway.Standalone	Microsoft.AdvancedThreatAnalytics.1_8.Gateway	False	True	False	False	False	Public
	Advanced Threat Analytics 1.8 实例组	Microsoft.AdvancedThreatAnalytics.1_8.InstancesGroup	Microsoft.SystemCenter.InstanceGroup	False	False	True	True	False	Public
	Advanced Threat Analytics 1.8 种子类	Microsoft.AdvancedThreatAnalytics.1_8.Seed	Microsoft.Windows.LocalApplication	False	True	False	False	False	Public
	Advanced Threat Analytics 1.8 服务器组	Microsoft.AdvancedThreatAnalytics.1_8.ServersGroup	Microsoft.SystemCenter.ComputerGroup	False	False	True	True	False	Public
	Advanced Threat Analytics 1.8 服务	Microsoft.AdvancedThreatAnalytics.1_8.Service	Microsoft.AdvancedThreatAnalytics.ServiceComponent	False	False	False	False	False	Public
	Advanced Threat Analytics 1.8 服务组	Microsoft.AdvancedThreatAnalytics.1_8.ServiceGroup	Microsoft.SystemCenter.InstanceGroup	False	False	True	True	False	Public

Relationship Types (6)

	DisplayName	ID	Source	Target	Accessibility	Abstract
	Microsoft Advanced Threat Analytics 1.8 中心承载 1.8 数据库	Microsoft.AdvancedThreatAnalytics.1_8.Center.hosts.Microsoft.AdvancedThreatAnalytics.1_8.Database	Microsoft.AdvancedThreatAnalytics.1_8.Center	Microsoft.AdvancedThreatAnalytics.1_8.Database	Public	False
	Advanced Threat Analytics 1.8 容器(网关)包含 1.8 轻型网关	Microsoft.AdvancedThreatAnalytics.1_8.Container.Gateway.contains.Microsoft.AdvancedThreatAnalytics.1_8.Gateway.LightWeight	Microsoft.AdvancedThreatAnalytics.1_8.Container.Gateway	Microsoft.AdvancedThreatAnalytics.1_8.Gateway.LightWeight	Public	False
	Advanced Threat Analytics 1.8 容器(网关)包含 1.8 独立网关	Microsoft.AdvancedThreatAnalytics.1_8.Container.Gateway.contains.Microsoft.AdvancedThreatAnalytics.1_8.Gateway.Standalone	Microsoft.AdvancedThreatAnalytics.1_8.Container.Gateway	Microsoft.AdvancedThreatAnalytics.1_8.Gateway.Standalone	Public	False
	Advanced Threat Analytics 1.8 服务包含 1.8 中心	Microsoft.AdvancedThreatAnalytics.1_8.Service.contains.Microsoft.AdvancedThreatAnalytics.1_8.Center	Microsoft.AdvancedThreatAnalytics.1_8.Service	Microsoft.AdvancedThreatAnalytics.1_8.Center	Public	False
	Advanced Threat Analytics 1.8 服务包含 1.8 容器(网关)	Microsoft.AdvancedThreatAnalytics.1_8.Service.contains.Microsoft.AdvancedThreatAnalytics.1_8.Container.Gateway	Microsoft.AdvancedThreatAnalytics.1_8.Service	Microsoft.AdvancedThreatAnalytics.1_8.Container.Gateway	Public	False
	Advanced Threat Analytics 容器包含 1.8 服务	Microsoft.AdvancedThreatAnalytics.Container.contains.Microsoft.AdvancedThreatAnalytics.1_8.Service	Microsoft.AdvancedThreatAnalytics.Container	Microsoft.AdvancedThreatAnalytics.1_8.Service	Public	False

DataSource Modules (4)

	DisplayName	ID	Isolation	Accessibility
	Advanced Threat Analytics 1.8 中心发现数据源	Microsoft.AdvancedThreatAnalytics.1_8.Center.Discovery.DataSource	Any	Internal
	Advanced Threat Analytics 1.8 分布式应用程序发现数据源	Microsoft.AdvancedThreatAnalytics.1_8.DistributedApplication.Discovery.DataSource	Any	Internal
	Advanced Threat Analytics 1.8 网关发现数据源	Microsoft.AdvancedThreatAnalytics.1_8.Gateway.Discovery.DataSource	Any	Internal
	ATA 日志文件提供程序	Microsoft.AdvancedThreatAnalytics.LogFileProvider	Any	Internal

Categories (11)

	ID	Target
	Microsoft.AdvancedThreatAnalytics.1_8.Center.ATAConsole.Task.Category	Microsoft.AdvancedThreatAnalytics.1_8.Center.ATAConsole.Task
	Microsoft.AdvancedThreatAnalytics.1_8.Center.Icon.Category	Microsoft.AdvancedThreatAnalytics.Center.Icon
	Microsoft.AdvancedThreatAnalytics.1_8.Center.Small.Icon.Category	Microsoft.AdvancedThreatAnalytics.Center.Small.Icon
	Microsoft.AdvancedThreatAnalytics.1_8.Container.Gateway.Icon.Category	Microsoft.AdvancedThreatAnalytics.Container.Gateway.Icon
	Microsoft.AdvancedThreatAnalytics.1_8.Container.Gateway.Small.Icon.Category	Microsoft.AdvancedThreatAnalytics.Container.Gateway.Small.Icon
	Microsoft.AdvancedThreatAnalytics.1_8.Gateway.Standalone.Icon.Category	Microsoft.AdvancedThreatAnalytics.Gateway.Standalone.Icon
	Microsoft.AdvancedThreatAnalytics.1_8.Gateway.Standalone.Small.Icon.Category	Microsoft.AdvancedThreatAnalytics.Gateway.Standalone.Small.Icon
	Microsoft.AdvancedThreatAnalytics.1_8.LightweightGateway.Icon.Category	Microsoft.AdvancedThreatAnalytics.LightweightGateway.Icon
	Microsoft.AdvancedThreatAnalytics.1_8.LightweightGateway.Small.Icon.Category	Microsoft.AdvancedThreatAnalytics.LightweightGateway.Small.Icon
	Microsoft.AdvancedThreatAnalytics.1_8.Service.Icon.Category	Microsoft.AdvancedThreatAnalytics.Service.Icon
	Microsoft.AdvancedThreatAnalytics.1_8.Service.Small.Icon.Category	Microsoft.AdvancedThreatAnalytics.Service.Small.Icon

Discoveries (7)

	DisplayName	ID	Target	Enabled
	Advanced Threat Analytics 1.8 中心发现	Microsoft.AdvancedThreatAnalytics.1_8.Center.Discovery	Microsoft.AdvancedThreatAnalytics.1_8.Seed	True
	Advanced Threat Analytics 1.8 分布式应用程序发现	Microsoft.AdvancedThreatAnalytics.1_8.DistributedApplication.Discovery	Microsoft.SystemCenter.AllManagementServersPool	True
	Advanced Threat Analytics 1.8 网关发现	Microsoft.AdvancedThreatAnalytics.1_8.Gateway.Discovery	Microsoft.AdvancedThreatAnalytics.1_8.Seed	True
	Advanced Threat Analytics 1.8 实例组发现	Microsoft.AdvancedThreatAnalytics.1_8.InstancesGroup.Discovery	Microsoft.AdvancedThreatAnalytics.1_8.InstancesGroup	True
	Advanced Threat Analytics 1.8 种子发现	Microsoft.AdvancedThreatAnalytics.1_8.Seed.Discovery	Microsoft.Windows.Server.OperatingSystem	True
	Advanced Threat Analytics 1.8 服务器组发现	Microsoft.AdvancedThreatAnalytics.1_8.ServersGroup.Discovery	Microsoft.AdvancedThreatAnalytics.1_8.ServersGroup	True
	Advanced Threat Analytics 1.8 服务组发现	Microsoft.AdvancedThreatAnalytics.1_8.ServiceGroup.Discovery	Microsoft.AdvancedThreatAnalytics.1_8.ServiceGroup	True

Dependency Monitors (24)

	DisplayName	ID	Target	Algorithm	Source Monitor	Relationship	Category	Enabled	Alert Generate	Accessibility
	中心可用性汇总监视器	Microsoft.AdvancedThreatAnalytics.1_8.Center.Availability.RollupMonitor	Microsoft.AdvancedThreatAnalytics.1_8.Center	WorstOf	System.Health.AvailabilityState	Microsoft.AdvancedThreatAnalytics.1_8.Center.hosts.Microsoft.AdvancedThreatAnalytics.1_8.Database	AvailabilityHealth	True	False	Public
	中心配置汇总监视器	Microsoft.AdvancedThreatAnalytics.1_8.Center.Configuration.RollupMonitor	Microsoft.AdvancedThreatAnalytics.1_8.Center	WorstOf	System.Health.ConfigurationState	Microsoft.AdvancedThreatAnalytics.1_8.Center.hosts.Microsoft.AdvancedThreatAnalytics.1_8.Database	ConfigurationHealth	True	False	Public
	中心性能汇总监视器	Microsoft.AdvancedThreatAnalytics.1_8.Center.Performance.RollupMonitor	Microsoft.AdvancedThreatAnalytics.1_8.Center	WorstOf	System.Health.PerformanceState	Microsoft.AdvancedThreatAnalytics.1_8.Center.hosts.Microsoft.AdvancedThreatAnalytics.1_8.Database	PerformanceHealth	True	False	Public
	中心安全性汇总监视器	Microsoft.AdvancedThreatAnalytics.1_8.Center.Security.RollupMonitor	Microsoft.AdvancedThreatAnalytics.1_8.Center	WorstOf	System.Health.SecurityState	Microsoft.AdvancedThreatAnalytics.1_8.Center.hosts.Microsoft.AdvancedThreatAnalytics.1_8.Database	SecurityHealth	True	False	Public
	网关(轻型)可用性汇总监视器	Microsoft.AdvancedThreatAnalytics.1_8.Container.Gateway.LightWeight.Availability.RollupMonitor	Microsoft.AdvancedThreatAnalytics.1_8.Container.Gateway	WorstOf	System.Health.AvailabilityState	Microsoft.AdvancedThreatAnalytics.1_8.Container.Gateway.contains.Microsoft.AdvancedThreatAnalytics.1_8.Gateway.LightWeight	AvailabilityHealth	True	False	Public
	网关(轻型)配置汇总监视器	Microsoft.AdvancedThreatAnalytics.1_8.Container.Gateway.LightWeight.Configuration.RollupMonitor	Microsoft.AdvancedThreatAnalytics.1_8.Container.Gateway	WorstOf	System.Health.ConfigurationState	Microsoft.AdvancedThreatAnalytics.1_8.Container.Gateway.contains.Microsoft.AdvancedThreatAnalytics.1_8.Gateway.LightWeight	ConfigurationHealth	True	False	Public
	网关(轻型)性能汇总监视器	Microsoft.AdvancedThreatAnalytics.1_8.Container.Gateway.LightWeight.Performance.RollupMonitor	Microsoft.AdvancedThreatAnalytics.1_8.Container.Gateway	WorstOf	System.Health.PerformanceState	Microsoft.AdvancedThreatAnalytics.1_8.Container.Gateway.contains.Microsoft.AdvancedThreatAnalytics.1_8.Gateway.LightWeight	PerformanceHealth	True	False	Public
	网关(轻型)安全性汇总监视器	Microsoft.AdvancedThreatAnalytics.1_8.Container.Gateway.LightWeight.Security.RollupMonitor	Microsoft.AdvancedThreatAnalytics.1_8.Container.Gateway	WorstOf	System.Health.SecurityState	Microsoft.AdvancedThreatAnalytics.1_8.Container.Gateway.contains.Microsoft.AdvancedThreatAnalytics.1_8.Gateway.LightWeight	SecurityHealth	True	False	Public
	网关(独立)可用性汇总监视器	Microsoft.AdvancedThreatAnalytics.1_8.Container.Gateway.Standalone.Availability.RollupMonitor	Microsoft.AdvancedThreatAnalytics.1_8.Container.Gateway	WorstOf	System.Health.AvailabilityState	Microsoft.AdvancedThreatAnalytics.1_8.Container.Gateway.contains.Microsoft.AdvancedThreatAnalytics.1_8.Gateway.Standalone	AvailabilityHealth	True	False	Public
	网关(独立)配置汇总监视器	Microsoft.AdvancedThreatAnalytics.1_8.Container.Gateway.Standalone.Configuration.RollupMonitor	Microsoft.AdvancedThreatAnalytics.1_8.Container.Gateway	WorstOf	System.Health.ConfigurationState	Microsoft.AdvancedThreatAnalytics.1_8.Container.Gateway.contains.Microsoft.AdvancedThreatAnalytics.1_8.Gateway.Standalone	ConfigurationHealth	True	False	Public
	网关(独立)性能汇总监视器	Microsoft.AdvancedThreatAnalytics.1_8.Container.Gateway.Standalone.Performance.RollupMonitor	Microsoft.AdvancedThreatAnalytics.1_8.Container.Gateway	WorstOf	System.Health.PerformanceState	Microsoft.AdvancedThreatAnalytics.1_8.Container.Gateway.contains.Microsoft.AdvancedThreatAnalytics.1_8.Gateway.Standalone	PerformanceHealth	True	False	Public
	网关(独立)安全性汇总监视器	Microsoft.AdvancedThreatAnalytics.1_8.Container.Gateway.Standalone.Security.RollupMonitor	Microsoft.AdvancedThreatAnalytics.1_8.Container.Gateway	WorstOf	System.Health.SecurityState	Microsoft.AdvancedThreatAnalytics.1_8.Container.Gateway.contains.Microsoft.AdvancedThreatAnalytics.1_8.Gateway.Standalone	SecurityHealth	True	False	Public
	服务(中心)可用性汇总监视器	Microsoft.AdvancedThreatAnalytics.1_8.Service.Center.Availability.RollupMonitor	Microsoft.AdvancedThreatAnalytics.1_8.Service	WorstOf	System.Health.AvailabilityState	Microsoft.AdvancedThreatAnalytics.1_8.Service.contains.Microsoft.AdvancedThreatAnalytics.1_8.Center	AvailabilityHealth	True	False	Public
	服务(中心)配置汇总监视器	Microsoft.AdvancedThreatAnalytics.1_8.Service.Center.Configuration.RollupMonitor	Microsoft.AdvancedThreatAnalytics.1_8.Service	WorstOf	System.Health.ConfigurationState	Microsoft.AdvancedThreatAnalytics.1_8.Service.contains.Microsoft.AdvancedThreatAnalytics.1_8.Center	ConfigurationHealth	True	False	Public
	服务(中心)性能汇总监视器	Microsoft.AdvancedThreatAnalytics.1_8.Service.Center.Performance.RollupMonitor	Microsoft.AdvancedThreatAnalytics.1_8.Service	WorstOf	System.Health.PerformanceState	Microsoft.AdvancedThreatAnalytics.1_8.Service.contains.Microsoft.AdvancedThreatAnalytics.1_8.Center	PerformanceHealth	True	False	Public
	服务(中心)安全性汇总监视器	Microsoft.AdvancedThreatAnalytics.1_8.Service.Center.Security.RollupMonitor	Microsoft.AdvancedThreatAnalytics.1_8.Service	WorstOf	System.Health.SecurityState	Microsoft.AdvancedThreatAnalytics.1_8.Service.contains.Microsoft.AdvancedThreatAnalytics.1_8.Center	SecurityHealth	True	False	Public
	服务(网关)可用性汇总监视器	Microsoft.AdvancedThreatAnalytics.1_8.Service.Gateway.Availability.RollupMonitor	Microsoft.AdvancedThreatAnalytics.1_8.Service	WorstOf	System.Health.AvailabilityState	Microsoft.AdvancedThreatAnalytics.1_8.Service.contains.Microsoft.AdvancedThreatAnalytics.1_8.Container.Gateway	AvailabilityHealth	True	False	Public
	服务(网关)配置汇总监视器	Microsoft.AdvancedThreatAnalytics.1_8.Service.Gateway.Configuration.RollupMonitor	Microsoft.AdvancedThreatAnalytics.1_8.Service	WorstOf	System.Health.ConfigurationState	Microsoft.AdvancedThreatAnalytics.1_8.Service.contains.Microsoft.AdvancedThreatAnalytics.1_8.Container.Gateway	ConfigurationHealth	True	False	Public
	服务(网关)性能汇总监视器	Microsoft.AdvancedThreatAnalytics.1_8.Service.Gateway.Performance.RollupMonitor	Microsoft.AdvancedThreatAnalytics.1_8.Service	WorstOf	System.Health.PerformanceState	Microsoft.AdvancedThreatAnalytics.1_8.Service.contains.Microsoft.AdvancedThreatAnalytics.1_8.Container.Gateway	PerformanceHealth	True	False	Public
	服务(网关)安全性汇总监视器	Microsoft.AdvancedThreatAnalytics.1_8.Service.Gateway.Security.RollupMonitor	Microsoft.AdvancedThreatAnalytics.1_8.Service	WorstOf	System.Health.SecurityState	Microsoft.AdvancedThreatAnalytics.1_8.Service.contains.Microsoft.AdvancedThreatAnalytics.1_8.Container.Gateway	SecurityHealth	True	False	Public
	根可用性汇总监视器	Microsoft.AdvancedThreatAnalytics.Container.Availability.RollupMonitor	Microsoft.AdvancedThreatAnalytics.Container	WorstOf	System.Health.AvailabilityState	Microsoft.AdvancedThreatAnalytics.Container.contains.Microsoft.AdvancedThreatAnalytics.1_8.Service	AvailabilityHealth	True	False	Public
	根配置汇总监视器	Microsoft.AdvancedThreatAnalytics.Container.Configuration.RollupMonitor	Microsoft.AdvancedThreatAnalytics.Container	WorstOf	System.Health.ConfigurationState	Microsoft.AdvancedThreatAnalytics.Container.contains.Microsoft.AdvancedThreatAnalytics.1_8.Service	ConfigurationHealth	True	False	Public
	根性能汇总监视器	Microsoft.AdvancedThreatAnalytics.Container.Performance.RollupMonitor	Microsoft.AdvancedThreatAnalytics.Container	WorstOf	System.Health.PerformanceState	Microsoft.AdvancedThreatAnalytics.Container.contains.Microsoft.AdvancedThreatAnalytics.1_8.Service	PerformanceHealth	True	False	Public
	根安全性汇总监视器	Microsoft.AdvancedThreatAnalytics.Container.Security.RollupMonitor	Microsoft.AdvancedThreatAnalytics.Container	WorstOf	System.Health.SecurityState	Microsoft.AdvancedThreatAnalytics.Container.contains.Microsoft.AdvancedThreatAnalytics.1_8.Service	SecurityHealth	True	False	Public

Unit Monitors (34)

	DisplayName	ID	Target	Category	Enabled	Alert Generate	Accessibility
	ATA 中心服务监视器	Microsoft.AdvancedThreatAnalytics.1_8.Center.ATACenter	Microsoft.AdvancedThreatAnalytics.1_8.Center	AvailabilityHealth	True	True	Public
	数据库 AtSVC 块大小	Microsoft.AdvancedThreatAnalytics.1_8.Center.DatabaseAtSvcBlockSize.PerformanceHealth	Microsoft.AdvancedThreatAnalytics.1_8.Center	PerformanceHealth	True	True	Public
	数据库 DirectoryServicesActivity 块大小<	Microsoft.AdvancedThreatAnalytics.1_8.Center.DatabaseDirectoryServicesActivityBlockSize.PerformanceHealth	Microsoft.AdvancedThreatAnalytics.1_8.Center	PerformanceHealth	True	True	Public
	数据库 DNS 块大小	Microsoft.AdvancedThreatAnalytics.1_8.Center.DatabaseDnsBlockSize.PerformanceHealth	Microsoft.AdvancedThreatAnalytics.1_8.Center	PerformanceHealth	True	True	Public
	数据库 DRSR 块大小	Microsoft.AdvancedThreatAnalytics.1_8.Center.DatabaseDrsrBlockSize.PerformanceHealth	Microsoft.AdvancedThreatAnalytics.1_8.Center	PerformanceHealth	True	True	Public
	数据库 GroupMembershipChangeEvent 块大小	Microsoft.AdvancedThreatAnalytics.1_8.Center.DatabaseGroupMembershipChangeEventBlockSize.PerformanceHealth	Microsoft.AdvancedThreatAnalytics.1_8.Center	PerformanceHealth	True	True	Public
	数据库 KerberosAP 块大小	Microsoft.AdvancedThreatAnalytics.1_8.Center.DatabaseKerberosApBlockSize.PerformanceHealth	Microsoft.AdvancedThreatAnalytics.1_8.Center	PerformanceHealth	True	True	Public
	数据库 KerberosAP 块大小	Microsoft.AdvancedThreatAnalytics.1_8.Center.DatabaseKerberosAsBlockSize.PerformanceHealth	Microsoft.AdvancedThreatAnalytics.1_8.Center	PerformanceHealth	True	True	Public
	数据库 KerberosTGS 块大小	Microsoft.AdvancedThreatAnalytics.1_8.Center.DatabaseKerberosTgsBlockSize.PerformanceHealth	Microsoft.AdvancedThreatAnalytics.1_8.Center	PerformanceHealth	True	True	Public
	数据库 LDAP 块大小	Microsoft.AdvancedThreatAnalytics.1_8.Center.DatabaseLdapBlockSize.PerformanceHealth	Microsoft.AdvancedThreatAnalytics.1_8.Center	PerformanceHealth	True	True	Public
	数据库 LogonEvent 块大小	Microsoft.AdvancedThreatAnalytics.1_8.Center.DatabaseLogonEventBlockSize.PerformanceHealth	Microsoft.AdvancedThreatAnalytics.1_8.Center	PerformanceHealth	True	True	Public
	数据库 LsaRPC 块大小	Microsoft.AdvancedThreatAnalytics.1_8.Center.DatabaseLsaRpcBlockSize.PerformanceHealth	Microsoft.AdvancedThreatAnalytics.1_8.Center	PerformanceHealth	True	True	Public
	数据库 Netlogon 块大小	Microsoft.AdvancedThreatAnalytics.1_8.Center.DatabaseNetlogonBlockSize.PerformanceHealth	Microsoft.AdvancedThreatAnalytics.1_8.Center	PerformanceHealth	True	True	Public
	数据库 NTLM 块大小	Microsoft.AdvancedThreatAnalytics.1_8.Center.DatabaseNtlmBlockSize.PerformanceHealth	Microsoft.AdvancedThreatAnalytics.1_8.Center	PerformanceHealth	True	True	Public
	数据库 NTLMEvent 块大小	Microsoft.AdvancedThreatAnalytics.1_8.Center.DatabaseNtlmEventBlockSize.PerformanceHealth	Microsoft.AdvancedThreatAnalytics.1_8.Center	PerformanceHealth	True	True	Public
	数据库 SAMR 块大小	Microsoft.AdvancedThreatAnalytics.1_8.Center.DatabaseSamrBlockSize.PerformanceHealth	Microsoft.AdvancedThreatAnalytics.1_8.Center	PerformanceHealth	True	True	Public
	数据库 ServiceControl 块大小	Microsoft.AdvancedThreatAnalytics.1_8.Center.DatabaseServiceControlBlockSize.PerformanceHealth	Microsoft.AdvancedThreatAnalytics.1_8.Center	PerformanceHealth	True	True	Public
	数据库 SMB 块大小	Microsoft.AdvancedThreatAnalytics.1_8.Center.DatabaseSmbBlockSize.PerformanceHealth	Microsoft.AdvancedThreatAnalytics.1_8.Center	PerformanceHealth	True	True	Public
	数据库 SrvSVC 块大小	Microsoft.AdvancedThreatAnalytics.1_8.Center.DatabaseSrvSvcBlockSize.PerformanceHealth	Microsoft.AdvancedThreatAnalytics.1_8.Center	PerformanceHealth	True	True	Public
	数据库 TaskScheduler 块大小	Microsoft.AdvancedThreatAnalytics.1_8.Center.DatabaseTaskSchedulerBlockSize.PerformanceHealth	Microsoft.AdvancedThreatAnalytics.1_8.Center	PerformanceHealth	True	True	Public
	数据库 VpnAuthenticationEvent 块大小	Microsoft.AdvancedThreatAnalytics.1_8.Center.DatabaseVpnAuthenticationEventBlockSize.PerformanceHealth	Microsoft.AdvancedThreatAnalytics.1_8.Center	PerformanceHealth	True	True	Public
	数据库 Wmi 块大小	Microsoft.AdvancedThreatAnalytics.1_8.Center.DatabaseWmiBlockSize.PerformanceHealth	Microsoft.AdvancedThreatAnalytics.1_8.Center	PerformanceHealth	True	True	Public
	EntityProfiler 网络活动块大小	Microsoft.AdvancedThreatAnalytics.1_8.Center.EntityProfilerNetworkActivityBlockSize.PerformanceHealth	Microsoft.AdvancedThreatAnalytics.1_8.Center	PerformanceHealth	True	True	Public
	EntityReceiver 实体批块大小	Microsoft.AdvancedThreatAnalytics.1_8.Center.EntityReceiverEntityBatchBlockSize.PerformanceHealth	Microsoft.AdvancedThreatAnalytics.1_8.Center	PerformanceHealth	True	True	Public
	NetworkActivityProcessor 网络活动块大小	Microsoft.AdvancedThreatAnalytics.1_8.Center.NetworkActivityProcessorNetworkActivityBlockSize.PerformanceHealth	Microsoft.AdvancedThreatAnalytics.1_8.Center	PerformanceHealth	True	True	Public
	MongoDB 服务监视器	Microsoft.AdvancedThreatAnalytics.1_8.Database.MongoDB	Microsoft.AdvancedThreatAnalytics.1_8.Database	AvailabilityHealth	True	True	Public
	ATA 网关服务监视器	Microsoft.AdvancedThreatAnalytics.1_8.Gateway.ATAGateway	Microsoft.AdvancedThreatAnalytics.1_8.Gateway	AvailabilityHealth	True	True	Public
	ATA 网关更新程序服务监视器	Microsoft.AdvancedThreatAnalytics.1_8.Gateway.ATAGatewayUpdater	Microsoft.AdvancedThreatAnalytics.1_8.Gateway	AvailabilityHealth	True	True	Public
	EntityResolver 活动块大小	Microsoft.AdvancedThreatAnalytics.1_8.Gateway.EntityResolverActivityBlockSize.PerformanceHealth	Microsoft.AdvancedThreatAnalytics.1_8.Gateway	PerformanceHealth	True	True	Public
	EntitySender 实体批块大小	Microsoft.AdvancedThreatAnalytics.1_8.Gateway.EntitySenderEntityBatchBlockSize.PerformanceHealth	Microsoft.AdvancedThreatAnalytics.1_8.Gateway	PerformanceHealth	True	True	Public
	EntitySender 实体批处理发送时间	Microsoft.AdvancedThreatAnalytics.1_8.Gateway.EntitySenderEntityBatchSendTime.PerformanceHealth	Microsoft.AdvancedThreatAnalytics.1_8.Gateway	PerformanceHealth	True	True	Public
	NetworkActivityTranslator 消息数据 0 块大小	Microsoft.AdvancedThreatAnalytics.1_8.Gateway.NetworkActivityTranslatorMessageData0BlockSize.PerformanceHealth	Microsoft.AdvancedThreatAnalytics.1_8.Gateway	PerformanceHealth	True	True	Public
	NetworkListener ETW 丢弃事件数/秒	Microsoft.AdvancedThreatAnalytics.1_8.Gateway.NetworkListenerETWDroppedEventsSec.PerformanceHealth	Microsoft.AdvancedThreatAnalytics.1_8.Gateway	PerformanceHealth	True	True	Public
	NetworkListener PEF 丢弃事件数/秒	Microsoft.AdvancedThreatAnalytics.1_8.Gateway.NetworkListenerPEFDroppedEventsSec.PerformanceHealth	Microsoft.AdvancedThreatAnalytics.1_8.Gateway	PerformanceHealth	True	True	Public

Rules (89)

	DisplayName	ID	Target	Category	Enabled	Alert Generate
	异常行为可疑活动预警规则	Microsoft.AdvancedThreatAnalytics.1_8.Center.AbnormalBehaviorSuspiciousActivity	Microsoft.AdvancedThreatAnalytics.1_8.Center	SecurityHealth	False	True
	异常协议可疑活动预警规则	Microsoft.AdvancedThreatAnalytics.1_8.Center.AbnormalProtocolSuspiciousActivity	Microsoft.AdvancedThreatAnalytics.1_8.Center	SecurityHealth	False	True
	异常的敏感组成员变更可疑活动预警规则	Microsoft.AdvancedThreatAnalytics.1_8.Center.AbnormalSensitiveGroupMembershipChangeSuspiciousActivity	Microsoft.AdvancedThreatAnalytics.1_8.Center	SecurityHealth	False	True
	异常 VPN 可疑活动预警规则	Microsoft.AdvancedThreatAnalytics.1_8.Center.AbnormalVpnSuspiciousActivity	Microsoft.AdvancedThreatAnalytics.1_8.Center	SecurityHealth	False	True
	帐户枚举可疑活动预警规则	Microsoft.AdvancedThreatAnalytics.1_8.Center.AccountEnumerationSuspiciousActivity	Microsoft.AdvancedThreatAnalytics.1_8.Center	SecurityHealth	False	True
	暴力破解可疑活动预警规则	Microsoft.AdvancedThreatAnalytics.1_8.Center.BruteForceSuspiciousActivity	Microsoft.AdvancedThreatAnalytics.1_8.Center	SecurityHealth	False	True
	ATA 1.8 - 中心数据库数据驱动器可用空间监视警报的预警规则	Microsoft.AdvancedThreatAnalytics.1_8.Center.CenterDatabaseDataDriveFreeSpaceMonitoringAlert	Microsoft.AdvancedThreatAnalytics.1_8.Center	AvailabilityHealth	True	True
	ATA 1.8 - 中心数据库断开监视警报的预警规则	Microsoft.AdvancedThreatAnalytics.1_8.Center.CenterDatabaseDisconnectedMonitoringAlert	Microsoft.AdvancedThreatAnalytics.1_8.Center	AvailabilityHealth	True	True
	ATA 1.8 - 中心外部 IP 地址解析失败监视警报的预警规则	Microsoft.AdvancedThreatAnalytics.1_8.Center.CenterExternalIpAddressResolutionFailureMonitoringAlert	Microsoft.AdvancedThreatAnalytics.1_8.Center	AvailabilityHealth	True	True
	ATA 1.8 - 中心邮件监视警报的预警规则	Microsoft.AdvancedThreatAnalytics.1_8.Center.CenterMailMonitoringAlert	Microsoft.AdvancedThreatAnalytics.1_8.Center	ConfigurationHealth	True	True
	ATA 1.8 - 中心未收到流量监视警报的预警规则	Microsoft.AdvancedThreatAnalytics.1_8.Center.CenterNotReceivingTrafficMonitoringAlert	Microsoft.AdvancedThreatAnalytics.1_8.Center	AvailabilityHealth	True	True
	ATA 1.8 - 中心超载监视警报的预警规则	Microsoft.AdvancedThreatAnalytics.1_8.Center.CenterOverloadedMonitoringAlert	Microsoft.AdvancedThreatAnalytics.1_8.Center	PerformanceHealth	True	True
	ATA 1.8 - 中心 Syslog 监视警报的预警规则	Microsoft.AdvancedThreatAnalytics.1_8.Center.CenterSyslogMonitoringAlert	Microsoft.AdvancedThreatAnalytics.1_8.Center	ConfigurationHealth	True	True
	ATA 1.8 - 证书过期监视警报的预警规则	Microsoft.AdvancedThreatAnalytics.1_8.Center.CertificateExpiryMonitoringAlert	Microsoft.AdvancedThreatAnalytics.1_8.Center	ConfigurationHealth	True	True
	计算机预身份验证失败可疑活动预警规则	Microsoft.AdvancedThreatAnalytics.1_8.Center.ComputerPreauthenticationFailedSuspiciousActivity	Microsoft.AdvancedThreatAnalytics.1_8.Center	SecurityHealth	False	True
	数据库 AtSVC 块大小	Microsoft.AdvancedThreatAnalytics.1_8.Center.DatabaseAtSvcBlockSize	Microsoft.AdvancedThreatAnalytics.1_8.Center	PerformanceCollection	True	False
	数据库 DirectoryServicesActivity 块大小	Microsoft.AdvancedThreatAnalytics.1_8.Center.DatabaseDirectoryServicesActivityBlockSize	Microsoft.AdvancedThreatAnalytics.1_8.Center	PerformanceCollection	True	False
	数据库 DNS 块大小	Microsoft.AdvancedThreatAnalytics.1_8.Center.DatabaseDnsBlockSize	Microsoft.AdvancedThreatAnalytics.1_8.Center	PerformanceCollection	True	False
	数据库 DRSR 块大小	Microsoft.AdvancedThreatAnalytics.1_8.Center.DatabaseDrsrBlockSize	Microsoft.AdvancedThreatAnalytics.1_8.Center	PerformanceCollection	True	False
	数据库 KerberosAP 块大小	Microsoft.AdvancedThreatAnalytics.1_8.Center.DatabaseKerberosApBlockSize	Microsoft.AdvancedThreatAnalytics.1_8.Center	PerformanceCollection	True	False
	数据库 KerberosAP 块大小	Microsoft.AdvancedThreatAnalytics.1_8.Center.DatabaseKerberosAsBlockSize	Microsoft.AdvancedThreatAnalytics.1_8.Center	PerformanceCollection	True	False
	数据库 KerberosTGS 块大小	Microsoft.AdvancedThreatAnalytics.1_8.Center.DatabaseKerberosTgsBlockSize	Microsoft.AdvancedThreatAnalytics.1_8.Center	PerformanceCollection	True	False
	数据库 LDAP 块大小	Microsoft.AdvancedThreatAnalytics.1_8.Center.DatabaseLdapBlockSize	Microsoft.AdvancedThreatAnalytics.1_8.Center	PerformanceCollection	True	False
	数据库 LsaRPC 块大小	Microsoft.AdvancedThreatAnalytics.1_8.Center.DatabaseLsaRpcBlockSize	Microsoft.AdvancedThreatAnalytics.1_8.Center	PerformanceCollection	True	False
	数据库 Netlogon 块大小	Microsoft.AdvancedThreatAnalytics.1_8.Center.DatabaseNetlogonBlockSize	Microsoft.AdvancedThreatAnalytics.1_8.Center	PerformanceCollection	True	False
	数据库 NTLM 块大小	Microsoft.AdvancedThreatAnalytics.1_8.Center.DatabaseNtlmBlockSize	Microsoft.AdvancedThreatAnalytics.1_8.Center	PerformanceCollection	True	False
	数据库 NTLMEvent 块大小	Microsoft.AdvancedThreatAnalytics.1_8.Center.DatabaseNtlmEventBlockSize	Microsoft.AdvancedThreatAnalytics.1_8.Center	PerformanceCollection	True	False
	数据库 ServiceControl 块大小	Microsoft.AdvancedThreatAnalytics.1_8.Center.DatabaseServiceControlBlockSize	Microsoft.AdvancedThreatAnalytics.1_8.Center	PerformanceCollection	True	False
	数据库 SMB 块大小	Microsoft.AdvancedThreatAnalytics.1_8.Center.DatabaseSmbBlockSize	Microsoft.AdvancedThreatAnalytics.1_8.Center	PerformanceCollection	True	False
	数据库 SrvSVC 块大小	Microsoft.AdvancedThreatAnalytics.1_8.Center.DatabaseSrvSvcBlockSize	Microsoft.AdvancedThreatAnalytics.1_8.Center	PerformanceCollection	True	False
	数据库 TaskScheduler 块大小	Microsoft.AdvancedThreatAnalytics.1_8.Center.DatabaseTaskSchedulerBlockSize	Microsoft.AdvancedThreatAnalytics.1_8.Center	PerformanceCollection	True	False
	目录服务复制可疑活动预警规则	Microsoft.AdvancedThreatAnalytics.1_8.Center.DirectoryServicesReplicationSuspiciousActivity	Microsoft.AdvancedThreatAnalytics.1_8.Center	SecurityHealth	False	True
	DNS 侦测可疑活动预警规则	Microsoft.AdvancedThreatAnalytics.1_8.Center.DnsReconnaissanceSuspiciousActivity	Microsoft.AdvancedThreatAnalytics.1_8.Center	SecurityHealth	False	True
	加密降级可疑活动预警规则	Microsoft.AdvancedThreatAnalytics.1_8.Center.EncryptionDowngradeSuspiciousActivity	Microsoft.AdvancedThreatAnalytics.1_8.Center	SecurityHealth	False	True
	EntityProfiler 网络活动块大小	Microsoft.AdvancedThreatAnalytics.1_8.Center.EntityProfilerNetworkActivityBlockSize	Microsoft.AdvancedThreatAnalytics.1_8.Center	PerformanceCollection	True	False
	EntityReceiver 实体批块大小	Microsoft.AdvancedThreatAnalytics.1_8.Center.EntityReceiverEntityBatchBlockSize	Microsoft.AdvancedThreatAnalytics.1_8.Center	PerformanceCollection	True	False
	加密降级可疑活动(黄金票证)预警规则	Microsoft.AdvancedThreatAnalytics.1_8.Center.EnumerateSessionsSuspiciousActivity	Microsoft.AdvancedThreatAnalytics.1_8.Center	SecurityHealth	False	True
	加密降级可疑活动(超哈希传递攻击)预警规则	Microsoft.AdvancedThreatAnalytics.1_8.Center.ForgedPacSuspiciousActivity	Microsoft.AdvancedThreatAnalytics.1_8.Center	SecurityHealth	False	True
	ATA 1.8 - 网关捕获网络适配器出错监视警报的预警规则	Microsoft.AdvancedThreatAnalytics.1_8.Center.GatewayCaptureNetworkAdapterFaultedMonitoringAlert	Microsoft.AdvancedThreatAnalytics.1_8.Center	AvailabilityHealth	True	True
	ATA 1.8 - 网关捕获网络适配器缺失监视警报的预警规则	Microsoft.AdvancedThreatAnalytics.1_8.Center.GatewayCaptureNetworkAdapterMissingMonitoringAlert	Microsoft.AdvancedThreatAnalytics.1_8.Center	ConfigurationHealth	True	True
	ATA 1.8 - 网关目录服务客户端帐户密码到期监视警报的预警规则	Microsoft.AdvancedThreatAnalytics.1_8.Center.GatewayDirectoryServicesClientAccountPasswordExpiryMonitoringAlert	Microsoft.AdvancedThreatAnalytics.1_8.Center	ConfigurationHealth	True	True
	ATA 1.8 - 网关目录服务客户端连接性监视警报的预警规则	Microsoft.AdvancedThreatAnalytics.1_8.Center.GatewayDirectoryServicesClientConnectivityMonitoringAlert	Microsoft.AdvancedThreatAnalytics.1_8.Center	AvailabilityHealth	True	True
	ATA 1.8 - 网关断开监视警报的预警规则	Microsoft.AdvancedThreatAnalytics.1_8.Center.GatewayDisconnectedMonitoringAlert	Microsoft.AdvancedThreatAnalytics.1_8.Center	AvailabilityHealth	True	True
	ATA 1.8 - 网关域同步器未分配监视警报的预警规则	Microsoft.AdvancedThreatAnalytics.1_8.Center.GatewayDomainSynchronizerNotAssignedMonitoringAlert	Microsoft.AdvancedThreatAnalytics.1_8.Center	ConfigurationHealth	True	True
	ATA 1.8 - 网关内存不足监视警报的预警规则	Microsoft.AdvancedThreatAnalytics.1_8.Center.GatewayLowMemoryMonitoringAlert	Microsoft.AdvancedThreatAnalytics.1_8.Center	PerformanceHealth	True	True
	ATA 1.8 - 网关超载事件活动监视警报的预警规则	Microsoft.AdvancedThreatAnalytics.1_8.Center.GatewayOverloadedEventActivitiesMonitoringAlert	Microsoft.AdvancedThreatAnalytics.1_8.Center	PerformanceHealth	True	True
	ATA 1.8 - 网关超载网络活动监视警报的预警规则	Microsoft.AdvancedThreatAnalytics.1_8.Center.GatewayOverloadedNetworkActivitiesMonitoringAlert	Microsoft.AdvancedThreatAnalytics.1_8.Center	PerformanceHealth	True	True
	ATA 1.8 - 网关 Radius 事件侦听器监视警报的预警规则	Microsoft.AdvancedThreatAnalytics.1_8.Center.GatewayRadiusEventListenerMonitoringAlert	Microsoft.AdvancedThreatAnalytics.1_8.Center	AvailabilityHealth	True	True
	ATA 1.8 - 网关过时监视警报的预警规则	Microsoft.AdvancedThreatAnalytics.1_8.Center.GatewaysOutdatedMonitoringAlert	Microsoft.AdvancedThreatAnalytics.1_8.Center	ConfigurationHealth	True	True
	ATA 1.8 - 网关启动失败监视警报的预警规则	Microsoft.AdvancedThreatAnalytics.1_8.Center.GatewayStartFailureMonitoringAlert	Microsoft.AdvancedThreatAnalytics.1_8.Center	AvailabilityHealth	True	True
	ATA 1.8 - 网关 Syslog 事件侦听器监视警报的预警规则	Microsoft.AdvancedThreatAnalytics.1_8.Center.GatewaySyslogEventListenerMonitoringAlert	Microsoft.AdvancedThreatAnalytics.1_8.Center	AvailabilityHealth	True	True
	加密降级可疑活动(万能钥匙)预警规则	Microsoft.AdvancedThreatAnalytics.1_8.Center.GoldenTicketSuspiciousActivity	Microsoft.AdvancedThreatAnalytics.1_8.Center	SecurityHealth	False	True
	枚举会话可疑活动预警规则	Microsoft.AdvancedThreatAnalytics.1_8.Center.HoneytokenActivitySuspiciousActivity	Microsoft.AdvancedThreatAnalytics.1_8.Center	SecurityHealth	False	True
	伪造 PAC 可疑活动预警规则	Microsoft.AdvancedThreatAnalytics.1_8.Center.LdapBruteForceSuspiciousActivity	Microsoft.AdvancedThreatAnalytics.1_8.Center	SecurityHealth	False	True
	蜜标活动可疑活动预警规则	Microsoft.AdvancedThreatAnalytics.1_8.Center.LdapCleartextPasswordSuspiciousActivity	Microsoft.AdvancedThreatAnalytics.1_8.Center	SecurityHealth	False	True
	LDAP 简单绑定明文密码可疑活动预警规则	Microsoft.AdvancedThreatAnalytics.1_8.Center.MassiveObjectDeletionSuspiciousActivity	Microsoft.AdvancedThreatAnalytics.1_8.Center	SecurityHealth	False	True
	NetworkActivityProcessor 网络活动块大小	Microsoft.AdvancedThreatAnalytics.1_8.Center.NetworkActivityProcessorNetworkActivityBlockSize	Microsoft.AdvancedThreatAnalytics.1_8.Center	PerformanceCollection	True	False
	大规模对象删除可疑活动预警规则	Microsoft.AdvancedThreatAnalytics.1_8.Center.PassTheHashSuspiciousActivity	Microsoft.AdvancedThreatAnalytics.1_8.Center	SecurityHealth	False	True
	哈希传递攻击可疑活动预警规则	Microsoft.AdvancedThreatAnalytics.1_8.Center.PassTheTicketSuspiciousActivity	Microsoft.AdvancedThreatAnalytics.1_8.Center	SecurityHealth	False	True
	票证传递攻击可疑活动预警规则	Microsoft.AdvancedThreatAnalytics.1_8.Center.RemoteExecutionSuspiciousActivity	Microsoft.AdvancedThreatAnalytics.1_8.Center	SecurityHealth	False	True
	远程执行可疑活动预警规则	Microsoft.AdvancedThreatAnalytics.1_8.Center.RetrieveDataProtectionBackupKeySuspiciousActivity	Microsoft.AdvancedThreatAnalytics.1_8.Center	SecurityHealth	False	True
	检索数据保护备份密钥可疑活动预警规则	Microsoft.AdvancedThreatAnalytics.1_8.Center.SamrReconnaissanceSuspiciousActivity	Microsoft.AdvancedThreatAnalytics.1_8.Center	SecurityHealth	False	True
	ATA 网关未能针对域控制器进行身份验证	Microsoft.AdvancedThreatAnalytics.1_8.Gateway.ActiveDirectoryAuthenticationFailure	Microsoft.AdvancedThreatAnalytics.1_8.Gateway	AvailabilityHealth	True	True
	注册表中可能禁用计数器	Microsoft.AdvancedThreatAnalytics.1_8.Gateway.CountersDisabled	Microsoft.AdvancedThreatAnalytics.1_8.Gateway	AvailabilityHealth	True	True
	EntityResolver 活动块大小	Microsoft.AdvancedThreatAnalytics.1_8.Gateway.EntityResolverActivityBlockSize	Microsoft.AdvancedThreatAnalytics.1_8.Gateway	PerformanceCollection	True	False
	EntitySender 实体批块大小	Microsoft.AdvancedThreatAnalytics.1_8.Gateway.EntitySenderEntityBatchBlockSize	Microsoft.AdvancedThreatAnalytics.1_8.Gateway	PerformanceCollection	True	False
	EntitySender 实体批处理发送时间	Microsoft.AdvancedThreatAnalytics.1_8.Gateway.EntitySenderEntityBatchSendTime	Microsoft.AdvancedThreatAnalytics.1_8.Gateway	PerformanceCollection	True	False
	ATA 网关未能针对中心进行身份验证	Microsoft.AdvancedThreatAnalytics.1_8.Gateway.FailedToAuthenticateAgainstCenter	Microsoft.AdvancedThreatAnalytics.1_8.Gateway	AvailabilityHealth	True	True
	ATA 网关未能建立与 ATA 中心的连接	Microsoft.AdvancedThreatAnalytics.1_8.Gateway.FailedToEstablishConnectionToCenter	Microsoft.AdvancedThreatAnalytics.1_8.Gateway	AvailabilityHealth	True	True
	ATA 网关未能分析 SIEM Syslog 消息	Microsoft.AdvancedThreatAnalytics.1_8.Gateway.FailedToParseSyslog	Microsoft.AdvancedThreatAnalytics.1_8.Gateway	AvailabilityHealth	True	True
	ATA 网关未能使用 LDAP 协议查询域控制器	Microsoft.AdvancedThreatAnalytics.1_8.Gateway.FailedToQueryDCUsingLDAPProtocol	Microsoft.AdvancedThreatAnalytics.1_8.Gateway	AvailabilityHealth	True	True
	ATA 网关未能从 ATA 中心同步配置	Microsoft.AdvancedThreatAnalytics.1_8.Gateway.FailedToSynchronizeConfigurationFromCenter	Microsoft.AdvancedThreatAnalytics.1_8.Gateway	AvailabilityHealth	True	True
	ATA 网关未能验证中心证书链	Microsoft.AdvancedThreatAnalytics.1_8.Gateway.FailedToValidateCenterCertificateChain	Microsoft.AdvancedThreatAnalytics.1_8.Gateway	AvailabilityHealth	True	True
	ATA 网关内存不足	Microsoft.AdvancedThreatAnalytics.1_8.Gateway.GatewayDoesNotHaveEnoughMemory	Microsoft.AdvancedThreatAnalytics.1_8.Gateway	AvailabilityHealth	True	True
	GatewayUpdaterResourceManager 提交内存最大大小	Microsoft.AdvancedThreatAnalytics.1_8.Gateway.GatewayUpdaterResourceManagerCommitMemoryMaxSize	Microsoft.AdvancedThreatAnalytics.1_8.Gateway	PerformanceCollection	True	False
	GatewayUpdaterResourceManager CPU 时间最大 \%	Microsoft.AdvancedThreatAnalytics.1_8.Gateway.GatewayUpdaterResourceManagerCPUTimeMax_	Microsoft.AdvancedThreatAnalytics.1_8.Gateway	PerformanceCollection	True	False
	GatewayUpdaterResourceManager 工作集限制大小	Microsoft.AdvancedThreatAnalytics.1_8.Gateway.GatewayUpdaterResourceManagerWorkingSetLimitSize	Microsoft.AdvancedThreatAnalytics.1_8.Gateway	PerformanceCollection	True	False
	HOSTS 文件中包含一个指向计算机简称的主机条目	Microsoft.AdvancedThreatAnalytics.1_8.Gateway.HostEntryInHOSTSFile	Microsoft.AdvancedThreatAnalytics.1_8.Gateway	AvailabilityHealth	True	True
	已在 ATA 网关安装消息分析器	Microsoft.AdvancedThreatAnalytics.1_8.Gateway.MessageAnalyzerIsInstalledOnGateway	Microsoft.AdvancedThreatAnalytics.1_8.Gateway	AvailabilityHealth	True	True
	NetworkActivityTranslator 消息数据 0 块大小	Microsoft.AdvancedThreatAnalytics.1_8.Gateway.NetworkActivityTranslatorMessageData0BlockSize	Microsoft.AdvancedThreatAnalytics.1_8.Gateway	PerformanceCollection	True	False
	NetworkListener ETW 丢弃事件数/秒	Microsoft.AdvancedThreatAnalytics.1_8.Gateway.NetworkListenerETWDroppedEvents_Sec	Microsoft.AdvancedThreatAnalytics.1_8.Gateway	PerformanceCollection	True	False
	NetworkListener PEF 丢弃事件数/秒	Microsoft.AdvancedThreatAnalytics.1_8.Gateway.NetworkListenerPEFDroppedEvents_Sec	Microsoft.AdvancedThreatAnalytics.1_8.Gateway	PerformanceCollection	True	False
	NetworkListener PEF 分析消息数/秒	Microsoft.AdvancedThreatAnalytics.1_8.Gateway.NetworkListenerPEFParsedMessages_Sec	Microsoft.AdvancedThreatAnalytics.1_8.Gateway	PerformanceCollection	True	False
	计算机上存在其他挂起的安装	Microsoft.AdvancedThreatAnalytics.1_8.Gateway.OtherPendingInstallations	Microsoft.AdvancedThreatAnalytics.1_8.Gateway	AvailabilityHealth	True	True
	PEF (消息分析器)未正确安装	Microsoft.AdvancedThreatAnalytics.1_8.Gateway.PEFWasNotInstalledCorrectly	Microsoft.AdvancedThreatAnalytics.1_8.Gateway	AvailabilityHealth	True	True
	已针对 ATA 网关中的进程名称启用 PID	Microsoft.AdvancedThreatAnalytics.1_8.Gateway.PIDsWasEnabledForProcessNamesInGateway	Microsoft.AdvancedThreatAnalytics.1_8.Gateway	AvailabilityHealth	True	True
	Microsoft.AdvancedThreatAnalytics.1_8.Center.EncryptionDowngradeGoldenTicketSuspiciousActivity	Microsoft.AdvancedThreatAnalytics.1_8.Center.EncryptionDowngradeGoldenTicketSuspiciousActivity	Microsoft.AdvancedThreatAnalytics.1_8.Center	SecurityHealth	False	True
	Microsoft.AdvancedThreatAnalytics.1_8.Center.EncryptionDowngradeOverPasstheHashSuspiciousActivity	Microsoft.AdvancedThreatAnalytics.1_8.Center.EncryptionDowngradeOverPasstheHashSuspiciousActivity	Microsoft.AdvancedThreatAnalytics.1_8.Center	SecurityHealth	False	True
	Microsoft.AdvancedThreatAnalytics.1_8.Center.EncryptionDowngradeSkeletonKeySuspiciousActivity	Microsoft.AdvancedThreatAnalytics.1_8.Center.EncryptionDowngradeSkeletonKeySuspiciousActivity	Microsoft.AdvancedThreatAnalytics.1_8.Center	SecurityHealth	False	True

Agent Tasks (12)

	DisplayName	ID	Target	Accessibility	Category	Enabled
	重新启动 ATACenter 服务	Microsoft.AdvancedThreatAnalytics.1_8.Center.ATACenter.Restart	Microsoft.AdvancedThreatAnalytics.1_8.Center	Internal	Maintenance	True
	启动 ATACenter 服务	Microsoft.AdvancedThreatAnalytics.1_8.Center.ATACenter.Start	Microsoft.AdvancedThreatAnalytics.1_8.Center	Internal	Maintenance	True
	停止 ATACenter 服务	Microsoft.AdvancedThreatAnalytics.1_8.Center.ATACenter.Stop	Microsoft.AdvancedThreatAnalytics.1_8.Center	Internal	Maintenance	True
	重新启动 MongoDB 服务	Microsoft.AdvancedThreatAnalytics.1_8.Database.MongoDB.Restart	Microsoft.AdvancedThreatAnalytics.1_8.Database	Internal	Maintenance	True
	启动 MongoDB 服务	Microsoft.AdvancedThreatAnalytics.1_8.Database.MongoDB.Start	Microsoft.AdvancedThreatAnalytics.1_8.Database	Internal	Maintenance	True
	停止 MongoDB 服务	Microsoft.AdvancedThreatAnalytics.1_8.Database.MongoDB.Stop	Microsoft.AdvancedThreatAnalytics.1_8.Database	Internal	Maintenance	True
	重新启动 ATAGateway 服务	Microsoft.AdvancedThreatAnalytics.1_8.Gateway.ATAGateway.Restart	Microsoft.AdvancedThreatAnalytics.1_8.Gateway	Internal	Maintenance	True
	启动 ATAGateway 服务	Microsoft.AdvancedThreatAnalytics.1_8.Gateway.ATAGateway.Start	Microsoft.AdvancedThreatAnalytics.1_8.Gateway	Internal	Maintenance	True
	停止 ATAGateway 服务	Microsoft.AdvancedThreatAnalytics.1_8.Gateway.ATAGateway.Stop	Microsoft.AdvancedThreatAnalytics.1_8.Gateway	Internal	Maintenance	True
	重新启动 ATAGatewayUpdater 服务	Microsoft.AdvancedThreatAnalytics.1_8.Gateway.ATAGatewayUpdater.Restart	Microsoft.AdvancedThreatAnalytics.1_8.Gateway	Internal	Maintenance	True
	启动 ATAGatewayUpdater 服务	Microsoft.AdvancedThreatAnalytics.1_8.Gateway.ATAGatewayUpdater.Start	Microsoft.AdvancedThreatAnalytics.1_8.Gateway	Internal	Maintenance	True
	停止 ATAGatewayUpdater 服务	Microsoft.AdvancedThreatAnalytics.1_8.Gateway.ATAGatewayUpdater.Stop	Microsoft.AdvancedThreatAnalytics.1_8.Gateway	Internal	Maintenance	True

Console Tasks (1)

	DisplayName	ID	Target	Accessibility	Enabled
	打开 ATA 中心控制台任务	Microsoft.AdvancedThreatAnalytics.1_8.Center.ATAConsole.Task	Microsoft.AdvancedThreatAnalytics.1_8.Center	Internal	True

Folder Items (4)

	ID	FolderName	ElementID
	Microsoft.AdvancedThreatAnalytics.1_8.Center.SecurityAlerts.FolderItem	Microsoft.AdvancedThreatAnalytics.1_8.Folder.Root	Microsoft.AdvancedThreatAnalytics.1_8.Center.SecurityAlerts
	Microsoft.AdvancedThreatAnalytics.1_8.HealthAlerts.FolderItem	Microsoft.AdvancedThreatAnalytics.1_8.Folder.Root	Microsoft.AdvancedThreatAnalytics.1_8.HealthAlerts
	Microsoft.AdvancedThreatAnalytics.1_8.PerformanceAlerts.FolderItem	Microsoft.AdvancedThreatAnalytics.1_8.Folder.Root	Microsoft.AdvancedThreatAnalytics.1_8.PerformanceAlerts
	Microsoft.AdvancedThreatAnalytics.1_8.StateGrid.FolderItem	Microsoft.AdvancedThreatAnalytics.1_8.Folder.Root	Microsoft.AdvancedThreatAnalytics.1_8.StateGrid

Folders (1)

	DisplayName	ID	ParentFolder	Accessibility
	Advanced Threat Analytics 1.8	Microsoft.AdvancedThreatAnalytics.1_8.Folder.Root	Microsoft.AdvancedThreatAnalytics.Folder.Root	Public

Image References (5)

	DisplayName	ID	ImageID
	Advanced Threat Analytics 1.8 中心	Microsoft.AdvancedThreatAnalytics.1_8.Center	Microsoft.AdvancedThreatAnalytics.Center.Small.Icon
	Advanced Threat Analytics 1.8 网关容器	Microsoft.AdvancedThreatAnalytics.1_8.Container.Gateway	Microsoft.AdvancedThreatAnalytics.Container.Gateway.Small.Icon
	Advanced Threat Analytics 1.8 轻型网关	Microsoft.AdvancedThreatAnalytics.1_8.Gateway.LightWeight	Microsoft.AdvancedThreatAnalytics.LightweightGateway.Small.Icon
	Advanced Threat Analytics 1.8 独立网关	Microsoft.AdvancedThreatAnalytics.1_8.Gateway.Standalone	Microsoft.AdvancedThreatAnalytics.Gateway.Standalone.Small.Icon
	Advanced Threat Analytics 1.8 服务	Microsoft.AdvancedThreatAnalytics.1_8.Service	Microsoft.AdvancedThreatAnalytics.Service.Small.Icon

Views (3)

	DisplayName	ID	Target	Type	Accessibility	Visible
	安全警报	Microsoft.AdvancedThreatAnalytics.1_8.Center.SecurityAlerts	Microsoft.AdvancedThreatAnalytics.1_8.Center	Microsoft.SystemCenter.AlertViewType	Internal	True
	运行状况警报	Microsoft.AdvancedThreatAnalytics.1_8.HealthAlerts	Microsoft.AdvancedThreatAnalytics.1_8.InstancesGroup	Microsoft.SystemCenter.AlertViewType	Public	True
	性能警报	Microsoft.AdvancedThreatAnalytics.1_8.PerformanceAlerts	Microsoft.AdvancedThreatAnalytics.1_8.InstancesGroup	Microsoft.SystemCenter.AlertViewType	Public	True

Component Implementations (4)

	ID	Type	Platform	Target	Accessibility
	Microsoft.AdvancedThreatAnalytics.1_8.StateGrid.Center.Implementation	Microsoft.AdvancedThreatAnalytics.1_8.StateGrid.Center	Wpf, Silverlight		Public
	Microsoft.AdvancedThreatAnalytics.1_8.StateGrid.Details.Implementation	Microsoft.AdvancedThreatAnalytics.1_8.StateGrid.Details	Wpf, Silverlight		Public
	Microsoft.AdvancedThreatAnalytics.1_8.StateGrid.Gateway.Implementation	Microsoft.AdvancedThreatAnalytics.1_8.StateGrid.Gateway	Wpf, Silverlight		Public
	Microsoft.AdvancedThreatAnalytics.1_8.StateGrid.Implementation	Microsoft.AdvancedThreatAnalytics.1_8.StateGrid	Wpf, Silverlight		Public

Component References (4)

	ID	Type	Parent	Accessibility
	Microsoft.AdvancedThreatAnalytics.1_8.StateGrid.Center.Reference	Microsoft.AdvancedThreatAnalytics.1_8.StateGrid.Center	Microsoft.AdvancedThreatAnalytics.1_8.StateGrid	Public
	Microsoft.AdvancedThreatAnalytics.1_8.StateGrid.Details.Reference	Microsoft.AdvancedThreatAnalytics.1_8.StateGrid.Details	Microsoft.AdvancedThreatAnalytics.1_8.StateGrid	Public
	Microsoft.AdvancedThreatAnalytics.1_8.StateGrid.Gateway.Reference	Microsoft.AdvancedThreatAnalytics.1_8.StateGrid.Gateway	Microsoft.AdvancedThreatAnalytics.1_8.StateGrid	Public
	Microsoft.AdvancedThreatAnalytics.1_8.StateGrid.Reference	Microsoft.AdvancedThreatAnalytics.1_8.StateGrid	Microsoft.AdvancedThreatAnalytics.1_8.Folder.Root	Public

Component Types (4)

	DisplayName	ID	Accessibility
	运行状况状态	Microsoft.AdvancedThreatAnalytics.1_8.StateGrid	Public
	运行状况状态 - 中心	Microsoft.AdvancedThreatAnalytics.1_8.StateGrid.Center	Public
	运行状况状态 - 详细信息	Microsoft.AdvancedThreatAnalytics.1_8.StateGrid.Details	Public
	运行状况状态 - 网关	Microsoft.AdvancedThreatAnalytics.1_8.StateGrid.Gateway	Public