Microsoft Advanced Threat Analytics 1.8 的管理組件
此為 Advanced Threat Analytics 1.8 的管理組件。此管理組件包含 ATA 1.8 的所有類別、檢視、監視器與探索。
| DisplayName | ID | Base Class | Abstract | Hosted | Singleton | Group | Extension | Accessibility | |
|---|---|---|---|---|---|---|---|---|---|
 | Advanced Threat Analytics 1.8 中心 | Microsoft.AdvancedThreatAnalytics.1_8.Center | Microsoft.Windows.ComputerRole | False | True | False | False | False | Public |
 | Advanced Threat Analytics 1.8 閘道容器 | Microsoft.AdvancedThreatAnalytics.1_8.Container.Gateway | Microsoft.AdvancedThreatAnalytics.ServiceComponent | False | False | False | False | False | Public |
 | Advanced Threat Analytics 1.8 資料庫 | Microsoft.AdvancedThreatAnalytics.1_8.Database | System.Database | False | True | False | False | False | Public |
 | Advanced Threat Analytics 1.8 閘道 | Microsoft.AdvancedThreatAnalytics.1_8.Gateway | Microsoft.Windows.ComputerRole | True | True | False | False | False | Public |
 | Advanced Threat Analytics 1.8 輕量型閘道 | Microsoft.AdvancedThreatAnalytics.1_8.Gateway.LightWeight | Microsoft.AdvancedThreatAnalytics.1_8.Gateway | False | True | False | False | False | Public |
 | Advanced Threat Analytics 1.8 獨立型閘道 | Microsoft.AdvancedThreatAnalytics.1_8.Gateway.Standalone | Microsoft.AdvancedThreatAnalytics.1_8.Gateway | False | True | False | False | False | Public |
 | Advanced Threat Analytics 1.8 執行個體群組 | Microsoft.AdvancedThreatAnalytics.1_8.InstancesGroup | Microsoft.SystemCenter.InstanceGroup | False | False | True | True | False | Public |
 | Advanced Threat Analytics 1.8 種子類別 | Microsoft.AdvancedThreatAnalytics.1_8.Seed | Microsoft.Windows.LocalApplication | False | True | False | False | False | Public |
 | Advanced Threat Analytics 1.8 伺服器群組 | Microsoft.AdvancedThreatAnalytics.1_8.ServersGroup | Microsoft.SystemCenter.ComputerGroup | False | False | True | True | False | Public |
 | Advanced Threat Analytics 1.8 服務 | Microsoft.AdvancedThreatAnalytics.1_8.Service | Microsoft.AdvancedThreatAnalytics.ServiceComponent | False | False | False | False | False | Public |
| Advanced Threat Analytics 1.8 服務群組 | Microsoft.AdvancedThreatAnalytics.1_8.ServiceGroup | Microsoft.SystemCenter.InstanceGroup | False | False | True | True | False | Public |
| DisplayName | ID | Source | Target | Accessibility | Abstract | |
|---|---|---|---|---|---|---|
 | Microsoft Advanced Threat Analytics 1.8 Center Hosts 1.8 資料庫 | Microsoft.AdvancedThreatAnalytics.1_8.Center.hosts.Microsoft.AdvancedThreatAnalytics.1_8.Database | Microsoft.AdvancedThreatAnalytics.1_8.Center | Microsoft.AdvancedThreatAnalytics.1_8.Database | Public | False |
| Advanced Threat Analytics 1.8 容器 (閘道) 包含 1.8 輕量型閘道 | Microsoft.AdvancedThreatAnalytics.1_8.Container.Gateway.contains.Microsoft.AdvancedThreatAnalytics.1_8.Gateway.LightWeight | Microsoft.AdvancedThreatAnalytics.1_8.Container.Gateway | Microsoft.AdvancedThreatAnalytics.1_8.Gateway.LightWeight | Public | False |
| Advanced Threat Analytics 1.8 容器 (閘道) 包含 1.8 獨立型閘道 | Microsoft.AdvancedThreatAnalytics.1_8.Container.Gateway.contains.Microsoft.AdvancedThreatAnalytics.1_8.Gateway.Standalone | Microsoft.AdvancedThreatAnalytics.1_8.Container.Gateway | Microsoft.AdvancedThreatAnalytics.1_8.Gateway.Standalone | Public | False |
| Advanced Threat Analytics 1.8 服務包含 1.8 中心 | Microsoft.AdvancedThreatAnalytics.1_8.Service.contains.Microsoft.AdvancedThreatAnalytics.1_8.Center | Microsoft.AdvancedThreatAnalytics.1_8.Service | Microsoft.AdvancedThreatAnalytics.1_8.Center | Public | False |
| Advanced Threat Analytics 1.8 服務包含 1.8 容器 (閘道) | Microsoft.AdvancedThreatAnalytics.1_8.Service.contains.Microsoft.AdvancedThreatAnalytics.1_8.Container.Gateway | Microsoft.AdvancedThreatAnalytics.1_8.Service | Microsoft.AdvancedThreatAnalytics.1_8.Container.Gateway | Public | False |
| Advanced Threat Analytics 容器包含 1.8 服務 | Microsoft.AdvancedThreatAnalytics.Container.contains.Microsoft.AdvancedThreatAnalytics.1_8.Service | Microsoft.AdvancedThreatAnalytics.Container | Microsoft.AdvancedThreatAnalytics.1_8.Service | Public | False |
| DisplayName | ID | Isolation | Accessibility | |
|---|---|---|---|---|
 | Advanced Threat Analytics 1.8 中心探索資料來源 | Microsoft.AdvancedThreatAnalytics.1_8.Center.Discovery.DataSource | Any | Internal |
| Advanced Threat Analytics 1.8 分散式應用程式探索資料來源 | Microsoft.AdvancedThreatAnalytics.1_8.DistributedApplication.Discovery.DataSource | Any | Internal |
| Advanced Threat Analytics 1.8 閘道探索資料來源 | Microsoft.AdvancedThreatAnalytics.1_8.Gateway.Discovery.DataSource | Any | Internal |
| ATA 記錄檔提供者 | Microsoft.AdvancedThreatAnalytics.LogFileProvider | Any | Internal |
| ID | Target | |
|---|---|---|
 | Microsoft.AdvancedThreatAnalytics.1_8.Center.ATAConsole.Task.Category | Microsoft.AdvancedThreatAnalytics.1_8.Center.ATAConsole.Task |
| Microsoft.AdvancedThreatAnalytics.1_8.Center.Icon.Category | Microsoft.AdvancedThreatAnalytics.Center.Icon |
| Microsoft.AdvancedThreatAnalytics.1_8.Center.Small.Icon.Category | Microsoft.AdvancedThreatAnalytics.Center.Small.Icon |
| Microsoft.AdvancedThreatAnalytics.1_8.Container.Gateway.Icon.Category | Microsoft.AdvancedThreatAnalytics.Container.Gateway.Icon |
| Microsoft.AdvancedThreatAnalytics.1_8.Container.Gateway.Small.Icon.Category | Microsoft.AdvancedThreatAnalytics.Container.Gateway.Small.Icon |
| Microsoft.AdvancedThreatAnalytics.1_8.Gateway.Standalone.Icon.Category | Microsoft.AdvancedThreatAnalytics.Gateway.Standalone.Icon |
| Microsoft.AdvancedThreatAnalytics.1_8.Gateway.Standalone.Small.Icon.Category | Microsoft.AdvancedThreatAnalytics.Gateway.Standalone.Small.Icon |
| Microsoft.AdvancedThreatAnalytics.1_8.LightweightGateway.Icon.Category | Microsoft.AdvancedThreatAnalytics.LightweightGateway.Icon |
| Microsoft.AdvancedThreatAnalytics.1_8.LightweightGateway.Small.Icon.Category | Microsoft.AdvancedThreatAnalytics.LightweightGateway.Small.Icon |
| Microsoft.AdvancedThreatAnalytics.1_8.Service.Icon.Category | Microsoft.AdvancedThreatAnalytics.Service.Icon |
| Microsoft.AdvancedThreatAnalytics.1_8.Service.Small.Icon.Category | Microsoft.AdvancedThreatAnalytics.Service.Small.Icon |
| DisplayName | ID | Target | Enabled | |
|---|---|---|---|---|
 | Advanced Threat Analytics 1.8 中心探索 | Microsoft.AdvancedThreatAnalytics.1_8.Center.Discovery | Microsoft.AdvancedThreatAnalytics.1_8.Seed | True |
| Advanced Threat Analytics 1.8 分散式應用程式探索 | Microsoft.AdvancedThreatAnalytics.1_8.DistributedApplication.Discovery | Microsoft.SystemCenter.AllManagementServersPool | True |
| Advanced Threat Analytics 1.8 閘道探索 | Microsoft.AdvancedThreatAnalytics.1_8.Gateway.Discovery | Microsoft.AdvancedThreatAnalytics.1_8.Seed | True |
| Advanced Threat Analytics 1.8 執行個體群組探索 | Microsoft.AdvancedThreatAnalytics.1_8.InstancesGroup.Discovery | Microsoft.AdvancedThreatAnalytics.1_8.InstancesGroup | True |
| Advanced Threat Analytics 1.8 種子探索 | Microsoft.AdvancedThreatAnalytics.1_8.Seed.Discovery | Microsoft.Windows.Server.OperatingSystem | True |
| Advanced Threat Analytics 1.8 伺服器群組探索 | Microsoft.AdvancedThreatAnalytics.1_8.ServersGroup.Discovery | Microsoft.AdvancedThreatAnalytics.1_8.ServersGroup | True |
| Advanced Threat Analytics 1.8 服務群組探索 | Microsoft.AdvancedThreatAnalytics.1_8.ServiceGroup.Discovery | Microsoft.AdvancedThreatAnalytics.1_8.ServiceGroup | True |
| DisplayName | ID | Target | Algorithm | Source Monitor | Relationship | Category | Enabled | Alert Generate | Accessibility | |
|---|---|---|---|---|---|---|---|---|---|---|
 | 中心可用性彙總監視 | Microsoft.AdvancedThreatAnalytics.1_8.Center.Availability.RollupMonitor | Microsoft.AdvancedThreatAnalytics.1_8.Center | WorstOf | System.Health.AvailabilityState | Microsoft.AdvancedThreatAnalytics.1_8.Center.hosts.Microsoft.AdvancedThreatAnalytics.1_8.Database | AvailabilityHealth | True | False | Public |
| 中心設定彙總監視 | Microsoft.AdvancedThreatAnalytics.1_8.Center.Configuration.RollupMonitor | Microsoft.AdvancedThreatAnalytics.1_8.Center | WorstOf | System.Health.ConfigurationState | Microsoft.AdvancedThreatAnalytics.1_8.Center.hosts.Microsoft.AdvancedThreatAnalytics.1_8.Database | ConfigurationHealth | True | False | Public |
| 中心效能彙總監視 | Microsoft.AdvancedThreatAnalytics.1_8.Center.Performance.RollupMonitor | Microsoft.AdvancedThreatAnalytics.1_8.Center | WorstOf | System.Health.PerformanceState | Microsoft.AdvancedThreatAnalytics.1_8.Center.hosts.Microsoft.AdvancedThreatAnalytics.1_8.Database | PerformanceHealth | True | False | Public |
| 中心安全性彙總監視 | Microsoft.AdvancedThreatAnalytics.1_8.Center.Security.RollupMonitor | Microsoft.AdvancedThreatAnalytics.1_8.Center | WorstOf | System.Health.SecurityState | Microsoft.AdvancedThreatAnalytics.1_8.Center.hosts.Microsoft.AdvancedThreatAnalytics.1_8.Database | SecurityHealth | True | False | Public |
| Gateway (Lightweight) Availability Rollup Monitor | Microsoft.AdvancedThreatAnalytics.1_8.Container.Gateway.LightWeight.Availability.RollupMonitor | Microsoft.AdvancedThreatAnalytics.1_8.Container.Gateway | WorstOf | System.Health.AvailabilityState | Microsoft.AdvancedThreatAnalytics.1_8.Container.Gateway.contains.Microsoft.AdvancedThreatAnalytics.1_8.Gateway.LightWeight | AvailabilityHealth | True | False | Public |
| Gateway (Lightweight) Configuration Rollup Monitor | Microsoft.AdvancedThreatAnalytics.1_8.Container.Gateway.LightWeight.Configuration.RollupMonitor | Microsoft.AdvancedThreatAnalytics.1_8.Container.Gateway | WorstOf | System.Health.ConfigurationState | Microsoft.AdvancedThreatAnalytics.1_8.Container.Gateway.contains.Microsoft.AdvancedThreatAnalytics.1_8.Gateway.LightWeight | ConfigurationHealth | True | False | Public |
| Gateway (Lightweight) Performance Rollup Monitor | Microsoft.AdvancedThreatAnalytics.1_8.Container.Gateway.LightWeight.Performance.RollupMonitor | Microsoft.AdvancedThreatAnalytics.1_8.Container.Gateway | WorstOf | System.Health.PerformanceState | Microsoft.AdvancedThreatAnalytics.1_8.Container.Gateway.contains.Microsoft.AdvancedThreatAnalytics.1_8.Gateway.LightWeight | PerformanceHealth | True | False | Public |
| Gateway (Lightweight) Security Rollup Monitor | Microsoft.AdvancedThreatAnalytics.1_8.Container.Gateway.LightWeight.Security.RollupMonitor | Microsoft.AdvancedThreatAnalytics.1_8.Container.Gateway | WorstOf | System.Health.SecurityState | Microsoft.AdvancedThreatAnalytics.1_8.Container.Gateway.contains.Microsoft.AdvancedThreatAnalytics.1_8.Gateway.LightWeight | SecurityHealth | True | False | Public |
| Gateway (Standalone) Availability Rollup Monitor | Microsoft.AdvancedThreatAnalytics.1_8.Container.Gateway.Standalone.Availability.RollupMonitor | Microsoft.AdvancedThreatAnalytics.1_8.Container.Gateway | WorstOf | System.Health.AvailabilityState | Microsoft.AdvancedThreatAnalytics.1_8.Container.Gateway.contains.Microsoft.AdvancedThreatAnalytics.1_8.Gateway.Standalone | AvailabilityHealth | True | False | Public |
| Gateway (Standalone) Configuration Rollup Monitor | Microsoft.AdvancedThreatAnalytics.1_8.Container.Gateway.Standalone.Configuration.RollupMonitor | Microsoft.AdvancedThreatAnalytics.1_8.Container.Gateway | WorstOf | System.Health.ConfigurationState | Microsoft.AdvancedThreatAnalytics.1_8.Container.Gateway.contains.Microsoft.AdvancedThreatAnalytics.1_8.Gateway.Standalone | ConfigurationHealth | True | False | Public |
| Gateway (Standalone) Performance Rollup Monitor | Microsoft.AdvancedThreatAnalytics.1_8.Container.Gateway.Standalone.Performance.RollupMonitor | Microsoft.AdvancedThreatAnalytics.1_8.Container.Gateway | WorstOf | System.Health.PerformanceState | Microsoft.AdvancedThreatAnalytics.1_8.Container.Gateway.contains.Microsoft.AdvancedThreatAnalytics.1_8.Gateway.Standalone | PerformanceHealth | True | False | Public |
| Gateway (Standalone) Security Rollup Monitor | Microsoft.AdvancedThreatAnalytics.1_8.Container.Gateway.Standalone.Security.RollupMonitor | Microsoft.AdvancedThreatAnalytics.1_8.Container.Gateway | WorstOf | System.Health.SecurityState | Microsoft.AdvancedThreatAnalytics.1_8.Container.Gateway.contains.Microsoft.AdvancedThreatAnalytics.1_8.Gateway.Standalone | SecurityHealth | True | False | Public |
| 服務 (中心) 可用性彙總監視器 | Microsoft.AdvancedThreatAnalytics.1_8.Service.Center.Availability.RollupMonitor | Microsoft.AdvancedThreatAnalytics.1_8.Service | WorstOf | System.Health.AvailabilityState | Microsoft.AdvancedThreatAnalytics.1_8.Service.contains.Microsoft.AdvancedThreatAnalytics.1_8.Center | AvailabilityHealth | True | False | Public |
| 服務 (中心) 設定彙總監視器 | Microsoft.AdvancedThreatAnalytics.1_8.Service.Center.Configuration.RollupMonitor | Microsoft.AdvancedThreatAnalytics.1_8.Service | WorstOf | System.Health.ConfigurationState | Microsoft.AdvancedThreatAnalytics.1_8.Service.contains.Microsoft.AdvancedThreatAnalytics.1_8.Center | ConfigurationHealth | True | False | Public |
| 服務 (中心) 效能彙總監視器 | Microsoft.AdvancedThreatAnalytics.1_8.Service.Center.Performance.RollupMonitor | Microsoft.AdvancedThreatAnalytics.1_8.Service | WorstOf | System.Health.PerformanceState | Microsoft.AdvancedThreatAnalytics.1_8.Service.contains.Microsoft.AdvancedThreatAnalytics.1_8.Center | PerformanceHealth | True | False | Public |
| 服務 (中心) 安全性彙總監視器 | Microsoft.AdvancedThreatAnalytics.1_8.Service.Center.Security.RollupMonitor | Microsoft.AdvancedThreatAnalytics.1_8.Service | WorstOf | System.Health.SecurityState | Microsoft.AdvancedThreatAnalytics.1_8.Service.contains.Microsoft.AdvancedThreatAnalytics.1_8.Center | SecurityHealth | True | False | Public |
| 服務 (閘道) 可用性彙總監視器 | Microsoft.AdvancedThreatAnalytics.1_8.Service.Gateway.Availability.RollupMonitor | Microsoft.AdvancedThreatAnalytics.1_8.Service | WorstOf | System.Health.AvailabilityState | Microsoft.AdvancedThreatAnalytics.1_8.Service.contains.Microsoft.AdvancedThreatAnalytics.1_8.Container.Gateway | AvailabilityHealth | True | False | Public |
| 服務 (閘道) 設定彙總監視器 | Microsoft.AdvancedThreatAnalytics.1_8.Service.Gateway.Configuration.RollupMonitor | Microsoft.AdvancedThreatAnalytics.1_8.Service | WorstOf | System.Health.ConfigurationState | Microsoft.AdvancedThreatAnalytics.1_8.Service.contains.Microsoft.AdvancedThreatAnalytics.1_8.Container.Gateway | ConfigurationHealth | True | False | Public |
| 服務 (閘道) 效能彙總監視器 | Microsoft.AdvancedThreatAnalytics.1_8.Service.Gateway.Performance.RollupMonitor | Microsoft.AdvancedThreatAnalytics.1_8.Service | WorstOf | System.Health.PerformanceState | Microsoft.AdvancedThreatAnalytics.1_8.Service.contains.Microsoft.AdvancedThreatAnalytics.1_8.Container.Gateway | PerformanceHealth | True | False | Public |
| 服務 (閘道) 安全性彙總監視器 | Microsoft.AdvancedThreatAnalytics.1_8.Service.Gateway.Security.RollupMonitor | Microsoft.AdvancedThreatAnalytics.1_8.Service | WorstOf | System.Health.SecurityState | Microsoft.AdvancedThreatAnalytics.1_8.Service.contains.Microsoft.AdvancedThreatAnalytics.1_8.Container.Gateway | SecurityHealth | True | False | Public |
| 根的可用性彙總監視器 | Microsoft.AdvancedThreatAnalytics.Container.Availability.RollupMonitor | Microsoft.AdvancedThreatAnalytics.Container | WorstOf | System.Health.AvailabilityState | Microsoft.AdvancedThreatAnalytics.Container.contains.Microsoft.AdvancedThreatAnalytics.1_8.Service | AvailabilityHealth | True | False | Public |
| 根的設定彙總監視器 | Microsoft.AdvancedThreatAnalytics.Container.Configuration.RollupMonitor | Microsoft.AdvancedThreatAnalytics.Container | WorstOf | System.Health.ConfigurationState | Microsoft.AdvancedThreatAnalytics.Container.contains.Microsoft.AdvancedThreatAnalytics.1_8.Service | ConfigurationHealth | True | False | Public |
| 根的效能彙總監視器 | Microsoft.AdvancedThreatAnalytics.Container.Performance.RollupMonitor | Microsoft.AdvancedThreatAnalytics.Container | WorstOf | System.Health.PerformanceState | Microsoft.AdvancedThreatAnalytics.Container.contains.Microsoft.AdvancedThreatAnalytics.1_8.Service | PerformanceHealth | True | False | Public |
| 根的安全性彙總監視器 | Microsoft.AdvancedThreatAnalytics.Container.Security.RollupMonitor | Microsoft.AdvancedThreatAnalytics.Container | WorstOf | System.Health.SecurityState | Microsoft.AdvancedThreatAnalytics.Container.contains.Microsoft.AdvancedThreatAnalytics.1_8.Service | SecurityHealth | True | False | Public |
| DisplayName | ID | Target | Category | Enabled | Alert Generate | Accessibility | |
|---|---|---|---|---|---|---|---|
 | ATA 中心服務監視 | Microsoft.AdvancedThreatAnalytics.1_8.Center.ATACenter | Microsoft.AdvancedThreatAnalytics.1_8.Center | AvailabilityHealth | True | True | Public |
| 資料庫 AtSVC 區塊大小 | Microsoft.AdvancedThreatAnalytics.1_8.Center.DatabaseAtSvcBlockSize.PerformanceHealth | Microsoft.AdvancedThreatAnalytics.1_8.Center | PerformanceHealth | True | True | Public |
| Database DirectoryServicesActivity Block Size< | Microsoft.AdvancedThreatAnalytics.1_8.Center.DatabaseDirectoryServicesActivityBlockSize.PerformanceHealth | Microsoft.AdvancedThreatAnalytics.1_8.Center | PerformanceHealth | True | True | Public |
| Database DNS Block Size | Microsoft.AdvancedThreatAnalytics.1_8.Center.DatabaseDnsBlockSize.PerformanceHealth | Microsoft.AdvancedThreatAnalytics.1_8.Center | PerformanceHealth | True | True | Public |
| Database DRSR Block Size | Microsoft.AdvancedThreatAnalytics.1_8.Center.DatabaseDrsrBlockSize.PerformanceHealth | Microsoft.AdvancedThreatAnalytics.1_8.Center | PerformanceHealth | True | True | Public |
| 資料庫 GroupMembershipChangeEvent 區塊大小 | Microsoft.AdvancedThreatAnalytics.1_8.Center.DatabaseGroupMembershipChangeEventBlockSize.PerformanceHealth | Microsoft.AdvancedThreatAnalytics.1_8.Center | PerformanceHealth | True | True | Public |
| 資料庫 KerberosAP 區塊大小 | Microsoft.AdvancedThreatAnalytics.1_8.Center.DatabaseKerberosApBlockSize.PerformanceHealth | Microsoft.AdvancedThreatAnalytics.1_8.Center | PerformanceHealth | True | True | Public |
| Database KerberosAS Block Size | Microsoft.AdvancedThreatAnalytics.1_8.Center.DatabaseKerberosAsBlockSize.PerformanceHealth | Microsoft.AdvancedThreatAnalytics.1_8.Center | PerformanceHealth | True | True | Public |
| 資料庫 KerberosTGS 區塊大小 | Microsoft.AdvancedThreatAnalytics.1_8.Center.DatabaseKerberosTgsBlockSize.PerformanceHealth | Microsoft.AdvancedThreatAnalytics.1_8.Center | PerformanceHealth | True | True | Public |
| Database LDAP Block Size | Microsoft.AdvancedThreatAnalytics.1_8.Center.DatabaseLdapBlockSize.PerformanceHealth | Microsoft.AdvancedThreatAnalytics.1_8.Center | PerformanceHealth | True | True | Public |
| 資料庫 LogonEvent 區塊大小 | Microsoft.AdvancedThreatAnalytics.1_8.Center.DatabaseLogonEventBlockSize.PerformanceHealth | Microsoft.AdvancedThreatAnalytics.1_8.Center | PerformanceHealth | True | True | Public |
| 資料庫 LsaRPC 區塊大小 | Microsoft.AdvancedThreatAnalytics.1_8.Center.DatabaseLsaRpcBlockSize.PerformanceHealth | Microsoft.AdvancedThreatAnalytics.1_8.Center | PerformanceHealth | True | True | Public |
| 資料庫 Netlogon 區塊大小 | Microsoft.AdvancedThreatAnalytics.1_8.Center.DatabaseNetlogonBlockSize.PerformanceHealth | Microsoft.AdvancedThreatAnalytics.1_8.Center | PerformanceHealth | True | True | Public |
| 資料庫 NTLM 區塊大小 | Microsoft.AdvancedThreatAnalytics.1_8.Center.DatabaseNtlmBlockSize.PerformanceHealth | Microsoft.AdvancedThreatAnalytics.1_8.Center | PerformanceHealth | True | True | Public |
| 資料庫 NTLMEvent 區塊大小 | Microsoft.AdvancedThreatAnalytics.1_8.Center.DatabaseNtlmEventBlockSize.PerformanceHealth | Microsoft.AdvancedThreatAnalytics.1_8.Center | PerformanceHealth | True | True | Public |
| Database SAMR Block Size | Microsoft.AdvancedThreatAnalytics.1_8.Center.DatabaseSamrBlockSize.PerformanceHealth | Microsoft.AdvancedThreatAnalytics.1_8.Center | PerformanceHealth | True | True | Public |
| 資料庫 ServiceControl 區塊大小 | Microsoft.AdvancedThreatAnalytics.1_8.Center.DatabaseServiceControlBlockSize.PerformanceHealth | Microsoft.AdvancedThreatAnalytics.1_8.Center | PerformanceHealth | True | True | Public |
| Database SMB Block Size | Microsoft.AdvancedThreatAnalytics.1_8.Center.DatabaseSmbBlockSize.PerformanceHealth | Microsoft.AdvancedThreatAnalytics.1_8.Center | PerformanceHealth | True | True | Public |
| 資料庫 SrvSVC 區塊大小 | Microsoft.AdvancedThreatAnalytics.1_8.Center.DatabaseSrvSvcBlockSize.PerformanceHealth | Microsoft.AdvancedThreatAnalytics.1_8.Center | PerformanceHealth | True | True | Public |
| Database TaskScheduler Block Size | Microsoft.AdvancedThreatAnalytics.1_8.Center.DatabaseTaskSchedulerBlockSize.PerformanceHealth | Microsoft.AdvancedThreatAnalytics.1_8.Center | PerformanceHealth | True | True | Public |
| 資料庫 VpnAuthenticationEvent 區塊大小 | Microsoft.AdvancedThreatAnalytics.1_8.Center.DatabaseVpnAuthenticationEventBlockSize.PerformanceHealth | Microsoft.AdvancedThreatAnalytics.1_8.Center | PerformanceHealth | True | True | Public |
| 資料庫 WMI 區塊大小 | Microsoft.AdvancedThreatAnalytics.1_8.Center.DatabaseWmiBlockSize.PerformanceHealth | Microsoft.AdvancedThreatAnalytics.1_8.Center | PerformanceHealth | True | True | Public |
| EntityProfiler 網路活動區塊大小 | Microsoft.AdvancedThreatAnalytics.1_8.Center.EntityProfilerNetworkActivityBlockSize.PerformanceHealth | Microsoft.AdvancedThreatAnalytics.1_8.Center | PerformanceHealth | True | True | Public |
| EntityReceiver 實體批次區塊大小 | Microsoft.AdvancedThreatAnalytics.1_8.Center.EntityReceiverEntityBatchBlockSize.PerformanceHealth | Microsoft.AdvancedThreatAnalytics.1_8.Center | PerformanceHealth | True | True | Public |
| NetworkActivityProcessor 網路活動區塊大小 | Microsoft.AdvancedThreatAnalytics.1_8.Center.NetworkActivityProcessorNetworkActivityBlockSize.PerformanceHealth | Microsoft.AdvancedThreatAnalytics.1_8.Center | PerformanceHealth | True | True | Public |
| MongoDB 服務監視器 | Microsoft.AdvancedThreatAnalytics.1_8.Database.MongoDB | Microsoft.AdvancedThreatAnalytics.1_8.Database | AvailabilityHealth | True | True | Public |
| ATA 閘道服務監視 | Microsoft.AdvancedThreatAnalytics.1_8.Gateway.ATAGateway | Microsoft.AdvancedThreatAnalytics.1_8.Gateway | AvailabilityHealth | True | True | Public |
| ATA 閘道更新程式服務監視器 | Microsoft.AdvancedThreatAnalytics.1_8.Gateway.ATAGatewayUpdater | Microsoft.AdvancedThreatAnalytics.1_8.Gateway | AvailabilityHealth | True | True | Public |
| EntityResolver 活動區塊大小 | Microsoft.AdvancedThreatAnalytics.1_8.Gateway.EntityResolverActivityBlockSize.PerformanceHealth | Microsoft.AdvancedThreatAnalytics.1_8.Gateway | PerformanceHealth | True | True | Public |
| EntitySender 實體批次區塊大小 | Microsoft.AdvancedThreatAnalytics.1_8.Gateway.EntitySenderEntityBatchBlockSize.PerformanceHealth | Microsoft.AdvancedThreatAnalytics.1_8.Gateway | PerformanceHealth | True | True | Public |
| EntitySender 實體批次傳送時間 | Microsoft.AdvancedThreatAnalytics.1_8.Gateway.EntitySenderEntityBatchSendTime.PerformanceHealth | Microsoft.AdvancedThreatAnalytics.1_8.Gateway | PerformanceHealth | True | True | Public |
| NetworkActivityTranslator 郵件資料 0 區塊大小 | Microsoft.AdvancedThreatAnalytics.1_8.Gateway.NetworkActivityTranslatorMessageData0BlockSize.PerformanceHealth | Microsoft.AdvancedThreatAnalytics.1_8.Gateway | PerformanceHealth | True | True | Public |
| NetworkListener ETW 捨棄的事件/秒 | Microsoft.AdvancedThreatAnalytics.1_8.Gateway.NetworkListenerETWDroppedEventsSec.PerformanceHealth | Microsoft.AdvancedThreatAnalytics.1_8.Gateway | PerformanceHealth | True | True | Public |
| NetworkListener PEF 捨棄的事件/秒 | Microsoft.AdvancedThreatAnalytics.1_8.Gateway.NetworkListenerPEFDroppedEventsSec.PerformanceHealth | Microsoft.AdvancedThreatAnalytics.1_8.Gateway | PerformanceHealth | True | True | Public |
| DisplayName | ID | Target | Category | Enabled | Alert Generate | |
|---|---|---|---|---|---|---|
 | 異常行為可疑活動警示規則 | Microsoft.AdvancedThreatAnalytics.1_8.Center.AbnormalBehaviorSuspiciousActivity | Microsoft.AdvancedThreatAnalytics.1_8.Center | SecurityHealth | False | True |
| 異常通訊協定可疑活動警示規則 | Microsoft.AdvancedThreatAnalytics.1_8.Center.AbnormalProtocolSuspiciousActivity | Microsoft.AdvancedThreatAnalytics.1_8.Center | SecurityHealth | False | True |
| 異常敏感群組成員資格變更可疑活動警示規則 | Microsoft.AdvancedThreatAnalytics.1_8.Center.AbnormalSensitiveGroupMembershipChangeSuspiciousActivity | Microsoft.AdvancedThreatAnalytics.1_8.Center | SecurityHealth | False | True |
| 異常 VPN 可疑活動警示規則 | Microsoft.AdvancedThreatAnalytics.1_8.Center.AbnormalVpnSuspiciousActivity | Microsoft.AdvancedThreatAnalytics.1_8.Center | SecurityHealth | False | True |
| 帳戶列舉可疑活動警示規則 | Microsoft.AdvancedThreatAnalytics.1_8.Center.AccountEnumerationSuspiciousActivity | Microsoft.AdvancedThreatAnalytics.1_8.Center | SecurityHealth | False | True |
| 暴力密碼破解可疑活動警示規則 | Microsoft.AdvancedThreatAnalytics.1_8.Center.BruteForceSuspiciousActivity | Microsoft.AdvancedThreatAnalytics.1_8.Center | SecurityHealth | False | True |
| ATA 1.8 - 中心資料庫資料磁碟機可用空間監視警示的警示規則 | Microsoft.AdvancedThreatAnalytics.1_8.Center.CenterDatabaseDataDriveFreeSpaceMonitoringAlert | Microsoft.AdvancedThreatAnalytics.1_8.Center | AvailabilityHealth | True | True |
| ATA 1.8 - 中心資料庫中斷連線監視警示的警示規則 | Microsoft.AdvancedThreatAnalytics.1_8.Center.CenterDatabaseDisconnectedMonitoringAlert | Microsoft.AdvancedThreatAnalytics.1_8.Center | AvailabilityHealth | True | True |
| ATA 1.8 - 中心外部 IP 位址解析失敗監視警示的警示規則 | Microsoft.AdvancedThreatAnalytics.1_8.Center.CenterExternalIpAddressResolutionFailureMonitoringAlert | Microsoft.AdvancedThreatAnalytics.1_8.Center | AvailabilityHealth | True | True |
| ATA 1.8 - 中心郵件監視警示的警示規則 | Microsoft.AdvancedThreatAnalytics.1_8.Center.CenterMailMonitoringAlert | Microsoft.AdvancedThreatAnalytics.1_8.Center | ConfigurationHealth | True | True |
| ATA 1.8 - 中心未接收流量監視警示的警示規則 | Microsoft.AdvancedThreatAnalytics.1_8.Center.CenterNotReceivingTrafficMonitoringAlert | Microsoft.AdvancedThreatAnalytics.1_8.Center | AvailabilityHealth | True | True |
| ATA 1.8 - 中心負載過重監視警示的警示規則 | Microsoft.AdvancedThreatAnalytics.1_8.Center.CenterOverloadedMonitoringAlert | Microsoft.AdvancedThreatAnalytics.1_8.Center | PerformanceHealth | True | True |
| ATA 1.8 - 中心 Syslog 監視警示的警示規則 | Microsoft.AdvancedThreatAnalytics.1_8.Center.CenterSyslogMonitoringAlert | Microsoft.AdvancedThreatAnalytics.1_8.Center | ConfigurationHealth | True | True |
| ATA 1.8 - 憑證過期監視警示的警示規則 | Microsoft.AdvancedThreatAnalytics.1_8.Center.CertificateExpiryMonitoringAlert | Microsoft.AdvancedThreatAnalytics.1_8.Center | ConfigurationHealth | True | True |
| 電腦預先驗證失敗可疑活動警示規則 | Microsoft.AdvancedThreatAnalytics.1_8.Center.ComputerPreauthenticationFailedSuspiciousActivity | Microsoft.AdvancedThreatAnalytics.1_8.Center | SecurityHealth | False | True |
| 資料庫 AtSVC 區塊大小 | Microsoft.AdvancedThreatAnalytics.1_8.Center.DatabaseAtSvcBlockSize | Microsoft.AdvancedThreatAnalytics.1_8.Center | PerformanceCollection | True | False |
| 資料庫 DirectoryServicesActivity 區塊大小 | Microsoft.AdvancedThreatAnalytics.1_8.Center.DatabaseDirectoryServicesActivityBlockSize | Microsoft.AdvancedThreatAnalytics.1_8.Center | PerformanceCollection | True | False |
| Database DNS Block Size | Microsoft.AdvancedThreatAnalytics.1_8.Center.DatabaseDnsBlockSize | Microsoft.AdvancedThreatAnalytics.1_8.Center | PerformanceCollection | True | False |
| Database DRSR Block Size | Microsoft.AdvancedThreatAnalytics.1_8.Center.DatabaseDrsrBlockSize | Microsoft.AdvancedThreatAnalytics.1_8.Center | PerformanceCollection | True | False |
| 資料庫 KerberosAP 區塊大小 | Microsoft.AdvancedThreatAnalytics.1_8.Center.DatabaseKerberosApBlockSize | Microsoft.AdvancedThreatAnalytics.1_8.Center | PerformanceCollection | True | False |
| Database KerberosAS Block Size | Microsoft.AdvancedThreatAnalytics.1_8.Center.DatabaseKerberosAsBlockSize | Microsoft.AdvancedThreatAnalytics.1_8.Center | PerformanceCollection | True | False |
| 資料庫 KerberosTGS 區塊大小 | Microsoft.AdvancedThreatAnalytics.1_8.Center.DatabaseKerberosTgsBlockSize | Microsoft.AdvancedThreatAnalytics.1_8.Center | PerformanceCollection | True | False |
| Database LDAP Block Size | Microsoft.AdvancedThreatAnalytics.1_8.Center.DatabaseLdapBlockSize | Microsoft.AdvancedThreatAnalytics.1_8.Center | PerformanceCollection | True | False |
| 資料庫 LsaRPC 區塊大小 | Microsoft.AdvancedThreatAnalytics.1_8.Center.DatabaseLsaRpcBlockSize | Microsoft.AdvancedThreatAnalytics.1_8.Center | PerformanceCollection | True | False |
| 資料庫 Netlogon 區塊大小 | Microsoft.AdvancedThreatAnalytics.1_8.Center.DatabaseNetlogonBlockSize | Microsoft.AdvancedThreatAnalytics.1_8.Center | PerformanceCollection | True | False |
| 資料庫 NTLM 區塊大小 | Microsoft.AdvancedThreatAnalytics.1_8.Center.DatabaseNtlmBlockSize | Microsoft.AdvancedThreatAnalytics.1_8.Center | PerformanceCollection | True | False |
| 資料庫 NTLMEvent 區塊大小 | Microsoft.AdvancedThreatAnalytics.1_8.Center.DatabaseNtlmEventBlockSize | Microsoft.AdvancedThreatAnalytics.1_8.Center | PerformanceCollection | True | False |
| 資料庫 ServiceControl 區塊大小 | Microsoft.AdvancedThreatAnalytics.1_8.Center.DatabaseServiceControlBlockSize | Microsoft.AdvancedThreatAnalytics.1_8.Center | PerformanceCollection | True | False |
| Database SMB Block Size | Microsoft.AdvancedThreatAnalytics.1_8.Center.DatabaseSmbBlockSize | Microsoft.AdvancedThreatAnalytics.1_8.Center | PerformanceCollection | True | False |
| 資料庫 SrvSVC 區塊大小 | Microsoft.AdvancedThreatAnalytics.1_8.Center.DatabaseSrvSvcBlockSize | Microsoft.AdvancedThreatAnalytics.1_8.Center | PerformanceCollection | True | False |
| Database TaskScheduler Block Size | Microsoft.AdvancedThreatAnalytics.1_8.Center.DatabaseTaskSchedulerBlockSize | Microsoft.AdvancedThreatAnalytics.1_8.Center | PerformanceCollection | True | False |
| 目錄服務複寫可疑活動警示規則 | Microsoft.AdvancedThreatAnalytics.1_8.Center.DirectoryServicesReplicationSuspiciousActivity | Microsoft.AdvancedThreatAnalytics.1_8.Center | SecurityHealth | False | True |
| DNS 偵查可疑活動警示規則 | Microsoft.AdvancedThreatAnalytics.1_8.Center.DnsReconnaissanceSuspiciousActivity | Microsoft.AdvancedThreatAnalytics.1_8.Center | SecurityHealth | False | True |
| 加密降級可疑活動警示規則 | Microsoft.AdvancedThreatAnalytics.1_8.Center.EncryptionDowngradeSuspiciousActivity | Microsoft.AdvancedThreatAnalytics.1_8.Center | SecurityHealth | False | True |
| EntityProfiler 網路活動區塊大小 | Microsoft.AdvancedThreatAnalytics.1_8.Center.EntityProfilerNetworkActivityBlockSize | Microsoft.AdvancedThreatAnalytics.1_8.Center | PerformanceCollection | True | False |
| EntityReceiver 實體批次區塊大小 | Microsoft.AdvancedThreatAnalytics.1_8.Center.EntityReceiverEntityBatchBlockSize | Microsoft.AdvancedThreatAnalytics.1_8.Center | PerformanceCollection | True | False |
| 加密降級可疑活動 (黃金票證) 警示規則 | Microsoft.AdvancedThreatAnalytics.1_8.Center.EnumerateSessionsSuspiciousActivity | Microsoft.AdvancedThreatAnalytics.1_8.Center | SecurityHealth | False | True |
| 加密降級可疑活動 (略過雜湊) 警示規則 | Microsoft.AdvancedThreatAnalytics.1_8.Center.ForgedPacSuspiciousActivity | Microsoft.AdvancedThreatAnalytics.1_8.Center | SecurityHealth | False | True |
| ATA 1.8 - 閘道擷取網路介面卡錯誤監視警示的警示規則 | Microsoft.AdvancedThreatAnalytics.1_8.Center.GatewayCaptureNetworkAdapterFaultedMonitoringAlert | Microsoft.AdvancedThreatAnalytics.1_8.Center | AvailabilityHealth | True | True |
| ATA 1.8 - 閘道擷取網路介面卡遺漏監視警示的警示規則 | Microsoft.AdvancedThreatAnalytics.1_8.Center.GatewayCaptureNetworkAdapterMissingMonitoringAlert | Microsoft.AdvancedThreatAnalytics.1_8.Center | ConfigurationHealth | True | True |
| ATA 1.8 - 閘道目錄服務用戶端帳戶密碼過期監視警示的警示規則 | Microsoft.AdvancedThreatAnalytics.1_8.Center.GatewayDirectoryServicesClientAccountPasswordExpiryMonitoringAlert | Microsoft.AdvancedThreatAnalytics.1_8.Center | ConfigurationHealth | True | True |
| ATA 1.8 - 閘道目錄服務用戶端連線監視警示的警示規則 | Microsoft.AdvancedThreatAnalytics.1_8.Center.GatewayDirectoryServicesClientConnectivityMonitoringAlert | Microsoft.AdvancedThreatAnalytics.1_8.Center | AvailabilityHealth | True | True |
| ATA 1.8 - 閘道中斷連線監視警示的警示規則 | Microsoft.AdvancedThreatAnalytics.1_8.Center.GatewayDisconnectedMonitoringAlert | Microsoft.AdvancedThreatAnalytics.1_8.Center | AvailabilityHealth | True | True |
| ATA 1.8 - 未指派閘道網域同步器監視警示的警示規則 | Microsoft.AdvancedThreatAnalytics.1_8.Center.GatewayDomainSynchronizerNotAssignedMonitoringAlert | Microsoft.AdvancedThreatAnalytics.1_8.Center | ConfigurationHealth | True | True |
| ATA 1.8 - 閘道記憶體不足監視警示的警示規則 | Microsoft.AdvancedThreatAnalytics.1_8.Center.GatewayLowMemoryMonitoringAlert | Microsoft.AdvancedThreatAnalytics.1_8.Center | PerformanceHealth | True | True |
| ATA 1.8 - 閘道負載過重事件活動監視警示的警示規則 | Microsoft.AdvancedThreatAnalytics.1_8.Center.GatewayOverloadedEventActivitiesMonitoringAlert | Microsoft.AdvancedThreatAnalytics.1_8.Center | PerformanceHealth | True | True |
| ATA 1.8 - 閘道負載過重網路活動監視警示的警示規則 | Microsoft.AdvancedThreatAnalytics.1_8.Center.GatewayOverloadedNetworkActivitiesMonitoringAlert | Microsoft.AdvancedThreatAnalytics.1_8.Center | PerformanceHealth | True | True |
| ATA 1.8 - 閘道 Radius 事件接聽程式監視警示的警示規則 | Microsoft.AdvancedThreatAnalytics.1_8.Center.GatewayRadiusEventListenerMonitoringAlert | Microsoft.AdvancedThreatAnalytics.1_8.Center | AvailabilityHealth | True | True |
| ATA 1.8 - 閘道過期監視警示的警示規則 | Microsoft.AdvancedThreatAnalytics.1_8.Center.GatewaysOutdatedMonitoringAlert | Microsoft.AdvancedThreatAnalytics.1_8.Center | ConfigurationHealth | True | True |
| ATA 1.8 - 閘道啟動失敗監視警示的警示規則 | Microsoft.AdvancedThreatAnalytics.1_8.Center.GatewayStartFailureMonitoringAlert | Microsoft.AdvancedThreatAnalytics.1_8.Center | AvailabilityHealth | True | True |
| ATA 1.8 - 閘道 Syslog 事件接聽程式監視警示的警示規則 | Microsoft.AdvancedThreatAnalytics.1_8.Center.GatewaySyslogEventListenerMonitoringAlert | Microsoft.AdvancedThreatAnalytics.1_8.Center | AvailabilityHealth | True | True |
| 加密降級可疑活動 (萬能鑰匙) 警示規則 | Microsoft.AdvancedThreatAnalytics.1_8.Center.GoldenTicketSuspiciousActivity | Microsoft.AdvancedThreatAnalytics.1_8.Center | SecurityHealth | False | True |
| 列舉工作階段可疑活動警示規則 | Microsoft.AdvancedThreatAnalytics.1_8.Center.HoneytokenActivitySuspiciousActivity | Microsoft.AdvancedThreatAnalytics.1_8.Center | SecurityHealth | False | True |
| 偽造的 PAC 可疑活動警示規則 | Microsoft.AdvancedThreatAnalytics.1_8.Center.LdapBruteForceSuspiciousActivity | Microsoft.AdvancedThreatAnalytics.1_8.Center | SecurityHealth | False | True |
| Honeytoken 活動可疑活動警示規則 | Microsoft.AdvancedThreatAnalytics.1_8.Center.LdapCleartextPasswordSuspiciousActivity | Microsoft.AdvancedThreatAnalytics.1_8.Center | SecurityHealth | False | True |
| LDAP 簡單繫結純文字密碼可疑活動警示規則 | Microsoft.AdvancedThreatAnalytics.1_8.Center.MassiveObjectDeletionSuspiciousActivity | Microsoft.AdvancedThreatAnalytics.1_8.Center | SecurityHealth | False | True |
| NetworkActivityProcessor 網路活動區塊大小 | Microsoft.AdvancedThreatAnalytics.1_8.Center.NetworkActivityProcessorNetworkActivityBlockSize | Microsoft.AdvancedThreatAnalytics.1_8.Center | PerformanceCollection | True | False |
| 大量物件刪除可疑活動警示規則 | Microsoft.AdvancedThreatAnalytics.1_8.Center.PassTheHashSuspiciousActivity | Microsoft.AdvancedThreatAnalytics.1_8.Center | SecurityHealth | False | True |
| 傳遞雜湊可疑活動警示規則 | Microsoft.AdvancedThreatAnalytics.1_8.Center.PassTheTicketSuspiciousActivity | Microsoft.AdvancedThreatAnalytics.1_8.Center | SecurityHealth | False | True |
| 傳遞票證可疑活動警示規則 | Microsoft.AdvancedThreatAnalytics.1_8.Center.RemoteExecutionSuspiciousActivity | Microsoft.AdvancedThreatAnalytics.1_8.Center | SecurityHealth | False | True |
| 遠端執行可疑活動警示規則 | Microsoft.AdvancedThreatAnalytics.1_8.Center.RetrieveDataProtectionBackupKeySuspiciousActivity | Microsoft.AdvancedThreatAnalytics.1_8.Center | SecurityHealth | False | True |
| 擷取資料保護備份金鑰可疑活動警示規則 | Microsoft.AdvancedThreatAnalytics.1_8.Center.SamrReconnaissanceSuspiciousActivity | Microsoft.AdvancedThreatAnalytics.1_8.Center | SecurityHealth | False | True |
| ATA 閘道無法對網域控制站進行驗證 | Microsoft.AdvancedThreatAnalytics.1_8.Gateway.ActiveDirectoryAuthenticationFailure | Microsoft.AdvancedThreatAnalytics.1_8.Gateway | AvailabilityHealth | True | True |
| 登錄中可能已停用計數器 | Microsoft.AdvancedThreatAnalytics.1_8.Gateway.CountersDisabled | Microsoft.AdvancedThreatAnalytics.1_8.Gateway | AvailabilityHealth | True | True |
| EntityResolver 活動區塊大小 | Microsoft.AdvancedThreatAnalytics.1_8.Gateway.EntityResolverActivityBlockSize | Microsoft.AdvancedThreatAnalytics.1_8.Gateway | PerformanceCollection | True | False |
| EntitySender 實體批次區塊大小 | Microsoft.AdvancedThreatAnalytics.1_8.Gateway.EntitySenderEntityBatchBlockSize | Microsoft.AdvancedThreatAnalytics.1_8.Gateway | PerformanceCollection | True | False |
| EntitySender 實體批次傳送時間 | Microsoft.AdvancedThreatAnalytics.1_8.Gateway.EntitySenderEntityBatchSendTime | Microsoft.AdvancedThreatAnalytics.1_8.Gateway | PerformanceCollection | True | False |
| ATA 閘道無法對 中心進行驗證 | Microsoft.AdvancedThreatAnalytics.1_8.Gateway.FailedToAuthenticateAgainstCenter | Microsoft.AdvancedThreatAnalytics.1_8.Gateway | AvailabilityHealth | True | True |
| ATA 閘道無法建立與 ATA 中心的連線 | Microsoft.AdvancedThreatAnalytics.1_8.Gateway.FailedToEstablishConnectionToCenter | Microsoft.AdvancedThreatAnalytics.1_8.Gateway | AvailabilityHealth | True | True |
| ATA 閘道無法剖析 SIEM Syslog 訊息 | Microsoft.AdvancedThreatAnalytics.1_8.Gateway.FailedToParseSyslog | Microsoft.AdvancedThreatAnalytics.1_8.Gateway | AvailabilityHealth | True | True |
| ATA 閘道無法使用 LDAP 通訊協定查詢網域控制站 | Microsoft.AdvancedThreatAnalytics.1_8.Gateway.FailedToQueryDCUsingLDAPProtocol | Microsoft.AdvancedThreatAnalytics.1_8.Gateway | AvailabilityHealth | True | True |
| ATA 閘道無法同步來自 ATA 中心的設定 | Microsoft.AdvancedThreatAnalytics.1_8.Gateway.FailedToSynchronizeConfigurationFromCenter | Microsoft.AdvancedThreatAnalytics.1_8.Gateway | AvailabilityHealth | True | True |
| ATA 閘道無法驗證中心憑證鏈結 | Microsoft.AdvancedThreatAnalytics.1_8.Gateway.FailedToValidateCenterCertificateChain | Microsoft.AdvancedThreatAnalytics.1_8.Gateway | AvailabilityHealth | True | True |
| ATA 閘道的記憶體不足 | Microsoft.AdvancedThreatAnalytics.1_8.Gateway.GatewayDoesNotHaveEnoughMemory | Microsoft.AdvancedThreatAnalytics.1_8.Gateway | AvailabilityHealth | True | True |
| GatewayUpdaterResourceManager 認可記憶體大小上限 | Microsoft.AdvancedThreatAnalytics.1_8.Gateway.GatewayUpdaterResourceManagerCommitMemoryMaxSize | Microsoft.AdvancedThreatAnalytics.1_8.Gateway | PerformanceCollection | True | False |
| GatewayUpdaterResourceManager CPU 時間上限 \% | Microsoft.AdvancedThreatAnalytics.1_8.Gateway.GatewayUpdaterResourceManagerCPUTimeMax_ | Microsoft.AdvancedThreatAnalytics.1_8.Gateway | PerformanceCollection | True | False |
| GatewayUpdaterResourceManager 工作集限制大小 | Microsoft.AdvancedThreatAnalytics.1_8.Gateway.GatewayUpdaterResourceManagerWorkingSetLimitSize | Microsoft.AdvancedThreatAnalytics.1_8.Gateway | PerformanceCollection | True | False |
| HOSTS 檔案中有指向電腦簡短名稱的主機項目 | Microsoft.AdvancedThreatAnalytics.1_8.Gateway.HostEntryInHOSTSFile | Microsoft.AdvancedThreatAnalytics.1_8.Gateway | AvailabilityHealth | True | True |
| 郵件分析器已安裝在 ATA 閘道上 | Microsoft.AdvancedThreatAnalytics.1_8.Gateway.MessageAnalyzerIsInstalledOnGateway | Microsoft.AdvancedThreatAnalytics.1_8.Gateway | AvailabilityHealth | True | True |
| NetworkActivityTranslator 郵件資料 0 區塊大小 | Microsoft.AdvancedThreatAnalytics.1_8.Gateway.NetworkActivityTranslatorMessageData0BlockSize | Microsoft.AdvancedThreatAnalytics.1_8.Gateway | PerformanceCollection | True | False |
| NetworkListener ETW 捨棄的事件/秒 | Microsoft.AdvancedThreatAnalytics.1_8.Gateway.NetworkListenerETWDroppedEvents_Sec | Microsoft.AdvancedThreatAnalytics.1_8.Gateway | PerformanceCollection | True | False |
| NetworkListener PEF 捨棄的事件/秒 | Microsoft.AdvancedThreatAnalytics.1_8.Gateway.NetworkListenerPEFDroppedEvents_Sec | Microsoft.AdvancedThreatAnalytics.1_8.Gateway | PerformanceCollection | True | False |
| NetworkListener PEF 剖析的郵件/秒 | Microsoft.AdvancedThreatAnalytics.1_8.Gateway.NetworkListenerPEFParsedMessages_Sec | Microsoft.AdvancedThreatAnalytics.1_8.Gateway | PerformanceCollection | True | False |
| 電腦上有其他擱置中的安裝 | Microsoft.AdvancedThreatAnalytics.1_8.Gateway.OtherPendingInstallations | Microsoft.AdvancedThreatAnalytics.1_8.Gateway | AvailabilityHealth | True | True |
| 未正確安裝 PEF (郵件分析器) | Microsoft.AdvancedThreatAnalytics.1_8.Gateway.PEFWasNotInstalledCorrectly | Microsoft.AdvancedThreatAnalytics.1_8.Gateway | AvailabilityHealth | True | True |
| 已為 ATA 閘道中的處理序名稱啟用 PID | Microsoft.AdvancedThreatAnalytics.1_8.Gateway.PIDsWasEnabledForProcessNamesInGateway | Microsoft.AdvancedThreatAnalytics.1_8.Gateway | AvailabilityHealth | True | True |
| DisplayName | ID | Target | Accessibility | Category | Enabled | |
|---|---|---|---|---|---|---|
 | 重新啟動 ATACenter 服務 | Microsoft.AdvancedThreatAnalytics.1_8.Center.ATACenter.Restart | Microsoft.AdvancedThreatAnalytics.1_8.Center | Internal | Maintenance | True |
| 啟動 ATACenter 服務 | Microsoft.AdvancedThreatAnalytics.1_8.Center.ATACenter.Start | Microsoft.AdvancedThreatAnalytics.1_8.Center | Internal | Maintenance | True |
| 停止 ATACenter 服務 | Microsoft.AdvancedThreatAnalytics.1_8.Center.ATACenter.Stop | Microsoft.AdvancedThreatAnalytics.1_8.Center | Internal | Maintenance | True |
| 重新啟動 MongoDB 服務 | Microsoft.AdvancedThreatAnalytics.1_8.Database.MongoDB.Restart | Microsoft.AdvancedThreatAnalytics.1_8.Database | Internal | Maintenance | True |
| 啟動 MongoDB 服務 | Microsoft.AdvancedThreatAnalytics.1_8.Database.MongoDB.Start | Microsoft.AdvancedThreatAnalytics.1_8.Database | Internal | Maintenance | True |
| 停止 MongoDB 服務 | Microsoft.AdvancedThreatAnalytics.1_8.Database.MongoDB.Stop | Microsoft.AdvancedThreatAnalytics.1_8.Database | Internal | Maintenance | True |
| 重新啟動 ATAGateway 服務 | Microsoft.AdvancedThreatAnalytics.1_8.Gateway.ATAGateway.Restart | Microsoft.AdvancedThreatAnalytics.1_8.Gateway | Internal | Maintenance | True |
| 啟動 ATAGateway 服務 | Microsoft.AdvancedThreatAnalytics.1_8.Gateway.ATAGateway.Start | Microsoft.AdvancedThreatAnalytics.1_8.Gateway | Internal | Maintenance | True |
| 停止 ATAGateway 服務 | Microsoft.AdvancedThreatAnalytics.1_8.Gateway.ATAGateway.Stop | Microsoft.AdvancedThreatAnalytics.1_8.Gateway | Internal | Maintenance | True |
| 重新啟動 ATAGatewayUpdater 服務 | Microsoft.AdvancedThreatAnalytics.1_8.Gateway.ATAGatewayUpdater.Restart | Microsoft.AdvancedThreatAnalytics.1_8.Gateway | Internal | Maintenance | True |
| 啟動 ATAGatewayUpdater 服務 | Microsoft.AdvancedThreatAnalytics.1_8.Gateway.ATAGatewayUpdater.Start | Microsoft.AdvancedThreatAnalytics.1_8.Gateway | Internal | Maintenance | True |
| 停止 ATAGatewayUpdater 服務 | Microsoft.AdvancedThreatAnalytics.1_8.Gateway.ATAGatewayUpdater.Stop | Microsoft.AdvancedThreatAnalytics.1_8.Gateway | Internal | Maintenance | True |
| DisplayName | ID | Target | Accessibility | Enabled | |
|---|---|---|---|---|---|
 | 開啟 ATA 中央主控台工作 | Microsoft.AdvancedThreatAnalytics.1_8.Center.ATAConsole.Task | Microsoft.AdvancedThreatAnalytics.1_8.Center | Internal | True |
| ID | FolderName | ElementID | |
|---|---|---|---|
 | Microsoft.AdvancedThreatAnalytics.1_8.Center.SecurityAlerts.FolderItem | Microsoft.AdvancedThreatAnalytics.1_8.Folder.Root | Microsoft.AdvancedThreatAnalytics.1_8.Center.SecurityAlerts |
| Microsoft.AdvancedThreatAnalytics.1_8.HealthAlerts.FolderItem | Microsoft.AdvancedThreatAnalytics.1_8.Folder.Root | Microsoft.AdvancedThreatAnalytics.1_8.HealthAlerts |
| Microsoft.AdvancedThreatAnalytics.1_8.PerformanceAlerts.FolderItem | Microsoft.AdvancedThreatAnalytics.1_8.Folder.Root | Microsoft.AdvancedThreatAnalytics.1_8.PerformanceAlerts |
| Microsoft.AdvancedThreatAnalytics.1_8.StateGrid.FolderItem | Microsoft.AdvancedThreatAnalytics.1_8.Folder.Root | Microsoft.AdvancedThreatAnalytics.1_8.StateGrid |
| DisplayName | ID | ParentFolder | Accessibility | |
|---|---|---|---|---|
| Advanced Threat Analytics 1.8 | Microsoft.AdvancedThreatAnalytics.1_8.Folder.Root | Microsoft.AdvancedThreatAnalytics.Folder.Root | Public |
| DisplayName | ID | ImageID | |
|---|---|---|---|
 | Advanced Threat Analytics 1.8 中心 | Microsoft.AdvancedThreatAnalytics.1_8.Center | Microsoft.AdvancedThreatAnalytics.Center.Small.Icon |
| Advanced Threat Analytics 1.8 閘道容器 | Microsoft.AdvancedThreatAnalytics.1_8.Container.Gateway | Microsoft.AdvancedThreatAnalytics.Container.Gateway.Small.Icon |
| Advanced Threat Analytics 1.8 輕量型閘道 | Microsoft.AdvancedThreatAnalytics.1_8.Gateway.LightWeight | Microsoft.AdvancedThreatAnalytics.LightweightGateway.Small.Icon |
| Advanced Threat Analytics 1.8 獨立型閘道 | Microsoft.AdvancedThreatAnalytics.1_8.Gateway.Standalone | Microsoft.AdvancedThreatAnalytics.Gateway.Standalone.Small.Icon |
| Advanced Threat Analytics 1.8 服務 | Microsoft.AdvancedThreatAnalytics.1_8.Service | Microsoft.AdvancedThreatAnalytics.Service.Small.Icon |
| DisplayName | ID | Target | Type | Accessibility | Visible | |
|---|---|---|---|---|---|---|
 | 安全性警示 | Microsoft.AdvancedThreatAnalytics.1_8.Center.SecurityAlerts | Microsoft.AdvancedThreatAnalytics.1_8.Center | Microsoft.SystemCenter.AlertViewType | Internal | True |
| 健全狀況警示 | Microsoft.AdvancedThreatAnalytics.1_8.HealthAlerts | Microsoft.AdvancedThreatAnalytics.1_8.InstancesGroup | Microsoft.SystemCenter.AlertViewType | Public | True |
| 效能警示 | Microsoft.AdvancedThreatAnalytics.1_8.PerformanceAlerts | Microsoft.AdvancedThreatAnalytics.1_8.InstancesGroup | Microsoft.SystemCenter.AlertViewType | Public | True |
| ID | Type | Platform | Target | Accessibility | |
|---|---|---|---|---|---|
 | Microsoft.AdvancedThreatAnalytics.1_8.StateGrid.Center.Implementation | Microsoft.AdvancedThreatAnalytics.1_8.StateGrid.Center | Wpf, Silverlight | Public | |
| Microsoft.AdvancedThreatAnalytics.1_8.StateGrid.Details.Implementation | Microsoft.AdvancedThreatAnalytics.1_8.StateGrid.Details | Wpf, Silverlight | Public | |
| Microsoft.AdvancedThreatAnalytics.1_8.StateGrid.Gateway.Implementation | Microsoft.AdvancedThreatAnalytics.1_8.StateGrid.Gateway | Wpf, Silverlight | Public | |
| Microsoft.AdvancedThreatAnalytics.1_8.StateGrid.Implementation | Microsoft.AdvancedThreatAnalytics.1_8.StateGrid | Wpf, Silverlight | Public |
| ID | Type | Parent | Accessibility | |
|---|---|---|---|---|
| Microsoft.AdvancedThreatAnalytics.1_8.StateGrid.Center.Reference | Microsoft.AdvancedThreatAnalytics.1_8.StateGrid.Center | Microsoft.AdvancedThreatAnalytics.1_8.StateGrid | Public |
| Microsoft.AdvancedThreatAnalytics.1_8.StateGrid.Details.Reference | Microsoft.AdvancedThreatAnalytics.1_8.StateGrid.Details | Microsoft.AdvancedThreatAnalytics.1_8.StateGrid | Public |
| Microsoft.AdvancedThreatAnalytics.1_8.StateGrid.Gateway.Reference | Microsoft.AdvancedThreatAnalytics.1_8.StateGrid.Gateway | Microsoft.AdvancedThreatAnalytics.1_8.StateGrid | Public |
| Microsoft.AdvancedThreatAnalytics.1_8.StateGrid.Reference | Microsoft.AdvancedThreatAnalytics.1_8.StateGrid | Microsoft.AdvancedThreatAnalytics.1_8.Folder.Root | Public |
| DisplayName | ID | Accessibility | |
|---|---|---|---|
| 健全狀況狀態 | Microsoft.AdvancedThreatAnalytics.1_8.StateGrid | Public |
| 健康狀態 - 中心 | Microsoft.AdvancedThreatAnalytics.1_8.StateGrid.Center | Public |
| 健康狀態 - 詳細資料 | Microsoft.AdvancedThreatAnalytics.1_8.StateGrid.Details | Public |
| 健康狀態 - 閘道 | Microsoft.AdvancedThreatAnalytics.1_8.StateGrid.Gateway | Public |
Home
CHT 
Show Management Pack References