Módulo de administración para Microsoft Advanced Threat Analytics 1.8
Este es el Módulo de administración para Advanced Threat Analytics 1.8. Este módulo de administración contiene todas las clases, vistas, monitores y detecciones para ATA 1.8.
| DisplayName | ID | Base Class | Abstract | Hosted | Singleton | Group | Extension | Accessibility | |
|---|---|---|---|---|---|---|---|---|---|
 | Centro Advanced Threat Analytics 1.8 | Microsoft.AdvancedThreatAnalytics.1_8.Center | Microsoft.Windows.ComputerRole | False | True | False | False | False | Public |
 | Contenedor de puerta de enlace de Advanced Threat Analytics 1.8 | Microsoft.AdvancedThreatAnalytics.1_8.Container.Gateway | Microsoft.AdvancedThreatAnalytics.ServiceComponent | False | False | False | False | False | Public |
 | Base de datos de Advanced Threat Analytics 1.8 | Microsoft.AdvancedThreatAnalytics.1_8.Database | System.Database | False | True | False | False | False | Public |
 | Puerta de enlace de Advanced Threat Analytics 1.8 | Microsoft.AdvancedThreatAnalytics.1_8.Gateway | Microsoft.Windows.ComputerRole | True | True | False | False | False | Public |
 | Puerta de enlace ligera de Advanced Threat Analytics 1.8 | Microsoft.AdvancedThreatAnalytics.1_8.Gateway.LightWeight | Microsoft.AdvancedThreatAnalytics.1_8.Gateway | False | True | False | False | False | Public |
 | Puerta de enlace independiente de Advanced Threat Analytics 1.8 | Microsoft.AdvancedThreatAnalytics.1_8.Gateway.Standalone | Microsoft.AdvancedThreatAnalytics.1_8.Gateway | False | True | False | False | False | Public |
 | Grupo de instancias de Advanced Threat Analytics 1.8 | Microsoft.AdvancedThreatAnalytics.1_8.InstancesGroup | Microsoft.SystemCenter.InstanceGroup | False | False | True | True | False | Public |
 | Clase de valor de inicialización de Advanced Threat Analytics 1.8 | Microsoft.AdvancedThreatAnalytics.1_8.Seed | Microsoft.Windows.LocalApplication | False | True | False | False | False | Public |
 | Grupo de servidores de Advanced Threat Analytics 1.8 | Microsoft.AdvancedThreatAnalytics.1_8.ServersGroup | Microsoft.SystemCenter.ComputerGroup | False | False | True | True | False | Public |
 | Servicio de Advanced Threat Analytics 1.8 | Microsoft.AdvancedThreatAnalytics.1_8.Service | Microsoft.AdvancedThreatAnalytics.ServiceComponent | False | False | False | False | False | Public |
| Grupo de servicios de Advanced Threat Analytics 1.8 | Microsoft.AdvancedThreatAnalytics.1_8.ServiceGroup | Microsoft.SystemCenter.InstanceGroup | False | False | True | True | False | Public |
| DisplayName | ID | Source | Target | Accessibility | Abstract | |
|---|---|---|---|---|---|---|
 | Base de datos de hosts del Centro 1.8 de Microsoft Advanced Threat Analytics 1.8 | Microsoft.AdvancedThreatAnalytics.1_8.Center.hosts.Microsoft.AdvancedThreatAnalytics.1_8.Database | Microsoft.AdvancedThreatAnalytics.1_8.Center | Microsoft.AdvancedThreatAnalytics.1_8.Database | Public | False |
| El contenedor (puerta de enlace) de Advanced Threat Analytics 1.8 contiene la puerta de enlace ligera 1.8 | Microsoft.AdvancedThreatAnalytics.1_8.Container.Gateway.contains.Microsoft.AdvancedThreatAnalytics.1_8.Gateway.LightWeight | Microsoft.AdvancedThreatAnalytics.1_8.Container.Gateway | Microsoft.AdvancedThreatAnalytics.1_8.Gateway.LightWeight | Public | False |
| El contenedor (puerta de enlace) de Advanced Threat Analytics 1.8 contiene la puerta de enlace independiente 1.8 | Microsoft.AdvancedThreatAnalytics.1_8.Container.Gateway.contains.Microsoft.AdvancedThreatAnalytics.1_8.Gateway.Standalone | Microsoft.AdvancedThreatAnalytics.1_8.Container.Gateway | Microsoft.AdvancedThreatAnalytics.1_8.Gateway.Standalone | Public | False |
| El servicio de Advanced Threat Analytics 1.8 contiene el Centro 1.8 | Microsoft.AdvancedThreatAnalytics.1_8.Service.contains.Microsoft.AdvancedThreatAnalytics.1_8.Center | Microsoft.AdvancedThreatAnalytics.1_8.Service | Microsoft.AdvancedThreatAnalytics.1_8.Center | Public | False |
| El servicio de Advanced Threat Analytics 1.8 incluye el contenedor 1.8 (puerta de enlace) | Microsoft.AdvancedThreatAnalytics.1_8.Service.contains.Microsoft.AdvancedThreatAnalytics.1_8.Container.Gateway | Microsoft.AdvancedThreatAnalytics.1_8.Service | Microsoft.AdvancedThreatAnalytics.1_8.Container.Gateway | Public | False |
| El contenedor de Advanced Threat Analytics contiene el servicio 1.8 | Microsoft.AdvancedThreatAnalytics.Container.contains.Microsoft.AdvancedThreatAnalytics.1_8.Service | Microsoft.AdvancedThreatAnalytics.Container | Microsoft.AdvancedThreatAnalytics.1_8.Service | Public | False |
| DisplayName | ID | Isolation | Accessibility | |
|---|---|---|---|---|
 | Origen de datos de detección del Centro Advanced Threat Analytics 1.8 | Microsoft.AdvancedThreatAnalytics.1_8.Center.Discovery.DataSource | Any | Internal |
| Origen de datos de detección de aplicación distribuida de Advanced Threat Analytics 1.8 | Microsoft.AdvancedThreatAnalytics.1_8.DistributedApplication.Discovery.DataSource | Any | Internal |
| Origen de datos de detección de puerta de enlace de Advanced Threat Analytics 1.8 | Microsoft.AdvancedThreatAnalytics.1_8.Gateway.Discovery.DataSource | Any | Internal |
| Proveedor de archivos de registro de ATA | Microsoft.AdvancedThreatAnalytics.LogFileProvider | Any | Internal |
| ID | Target | |
|---|---|---|
 | Microsoft.AdvancedThreatAnalytics.1_8.Center.ATAConsole.Task.Category | Microsoft.AdvancedThreatAnalytics.1_8.Center.ATAConsole.Task |
| Microsoft.AdvancedThreatAnalytics.1_8.Center.Icon.Category | Microsoft.AdvancedThreatAnalytics.Center.Icon |
| Microsoft.AdvancedThreatAnalytics.1_8.Center.Small.Icon.Category | Microsoft.AdvancedThreatAnalytics.Center.Small.Icon |
| Microsoft.AdvancedThreatAnalytics.1_8.Container.Gateway.Icon.Category | Microsoft.AdvancedThreatAnalytics.Container.Gateway.Icon |
| Microsoft.AdvancedThreatAnalytics.1_8.Container.Gateway.Small.Icon.Category | Microsoft.AdvancedThreatAnalytics.Container.Gateway.Small.Icon |
| Microsoft.AdvancedThreatAnalytics.1_8.Gateway.Standalone.Icon.Category | Microsoft.AdvancedThreatAnalytics.Gateway.Standalone.Icon |
| Microsoft.AdvancedThreatAnalytics.1_8.Gateway.Standalone.Small.Icon.Category | Microsoft.AdvancedThreatAnalytics.Gateway.Standalone.Small.Icon |
| Microsoft.AdvancedThreatAnalytics.1_8.LightweightGateway.Icon.Category | Microsoft.AdvancedThreatAnalytics.LightweightGateway.Icon |
| Microsoft.AdvancedThreatAnalytics.1_8.LightweightGateway.Small.Icon.Category | Microsoft.AdvancedThreatAnalytics.LightweightGateway.Small.Icon |
| Microsoft.AdvancedThreatAnalytics.1_8.Service.Icon.Category | Microsoft.AdvancedThreatAnalytics.Service.Icon |
| Microsoft.AdvancedThreatAnalytics.1_8.Service.Small.Icon.Category | Microsoft.AdvancedThreatAnalytics.Service.Small.Icon |
| DisplayName | ID | Target | Enabled | |
|---|---|---|---|---|
 | Detección del Centro Advanced Threat Analytics 1.8 | Microsoft.AdvancedThreatAnalytics.1_8.Center.Discovery | Microsoft.AdvancedThreatAnalytics.1_8.Seed | True |
| Detección de aplicación distribuida de Advanced Threat Analytics 1.8 | Microsoft.AdvancedThreatAnalytics.1_8.DistributedApplication.Discovery | Microsoft.SystemCenter.AllManagementServersPool | True |
| Detección de puerta de enlace de Advanced Threat Analytics 1.8 | Microsoft.AdvancedThreatAnalytics.1_8.Gateway.Discovery | Microsoft.AdvancedThreatAnalytics.1_8.Seed | True |
| Detección de grupo de instancias de Advanced Threat Analytics 1.8 | Microsoft.AdvancedThreatAnalytics.1_8.InstancesGroup.Discovery | Microsoft.AdvancedThreatAnalytics.1_8.InstancesGroup | True |
| Detección de valor de inicialización de Advanced Threat Analytics 1.8 | Microsoft.AdvancedThreatAnalytics.1_8.Seed.Discovery | Microsoft.Windows.Server.OperatingSystem | True |
| Detección de grupos de servidores de Advanced Threat Analytics 1.8 | Microsoft.AdvancedThreatAnalytics.1_8.ServersGroup.Discovery | Microsoft.AdvancedThreatAnalytics.1_8.ServersGroup | True |
| Detección de grupos de servicios de Advanced Threat Analytics 1.8 | Microsoft.AdvancedThreatAnalytics.1_8.ServiceGroup.Discovery | Microsoft.AdvancedThreatAnalytics.1_8.ServiceGroup | True |
| DisplayName | ID | Target | Algorithm | Source Monitor | Relationship | Category | Enabled | Alert Generate | Accessibility | |
|---|---|---|---|---|---|---|---|---|---|---|
 | Monitor de paquete acumulativo de disponibilidad del Centro | Microsoft.AdvancedThreatAnalytics.1_8.Center.Availability.RollupMonitor | Microsoft.AdvancedThreatAnalytics.1_8.Center | WorstOf | System.Health.AvailabilityState | Microsoft.AdvancedThreatAnalytics.1_8.Center.hosts.Microsoft.AdvancedThreatAnalytics.1_8.Database | AvailabilityHealth | True | False | Public |
| Monitor de paquete acumulativo de configuración del Centro | Microsoft.AdvancedThreatAnalytics.1_8.Center.Configuration.RollupMonitor | Microsoft.AdvancedThreatAnalytics.1_8.Center | WorstOf | System.Health.ConfigurationState | Microsoft.AdvancedThreatAnalytics.1_8.Center.hosts.Microsoft.AdvancedThreatAnalytics.1_8.Database | ConfigurationHealth | True | False | Public |
| Monitor de paquete acumulativo de rendimiento del Centro | Microsoft.AdvancedThreatAnalytics.1_8.Center.Performance.RollupMonitor | Microsoft.AdvancedThreatAnalytics.1_8.Center | WorstOf | System.Health.PerformanceState | Microsoft.AdvancedThreatAnalytics.1_8.Center.hosts.Microsoft.AdvancedThreatAnalytics.1_8.Database | PerformanceHealth | True | False | Public |
| Monitor de paquete acumulativo de seguridad de Centro | Microsoft.AdvancedThreatAnalytics.1_8.Center.Security.RollupMonitor | Microsoft.AdvancedThreatAnalytics.1_8.Center | WorstOf | System.Health.SecurityState | Microsoft.AdvancedThreatAnalytics.1_8.Center.hosts.Microsoft.AdvancedThreatAnalytics.1_8.Database | SecurityHealth | True | False | Public |
| Monitor de paquete acumulativo de disponibilidad de puerta de enlace (ligera) | Microsoft.AdvancedThreatAnalytics.1_8.Container.Gateway.LightWeight.Availability.RollupMonitor | Microsoft.AdvancedThreatAnalytics.1_8.Container.Gateway | WorstOf | System.Health.AvailabilityState | Microsoft.AdvancedThreatAnalytics.1_8.Container.Gateway.contains.Microsoft.AdvancedThreatAnalytics.1_8.Gateway.LightWeight | AvailabilityHealth | True | False | Public |
| Monitor de paquete acumulativo de configuración de puerta de enlace (ligera) | Microsoft.AdvancedThreatAnalytics.1_8.Container.Gateway.LightWeight.Configuration.RollupMonitor | Microsoft.AdvancedThreatAnalytics.1_8.Container.Gateway | WorstOf | System.Health.ConfigurationState | Microsoft.AdvancedThreatAnalytics.1_8.Container.Gateway.contains.Microsoft.AdvancedThreatAnalytics.1_8.Gateway.LightWeight | ConfigurationHealth | True | False | Public |
| Monitor de paquete acumulativo de rendimiento de puerta de enlace (ligera) | Microsoft.AdvancedThreatAnalytics.1_8.Container.Gateway.LightWeight.Performance.RollupMonitor | Microsoft.AdvancedThreatAnalytics.1_8.Container.Gateway | WorstOf | System.Health.PerformanceState | Microsoft.AdvancedThreatAnalytics.1_8.Container.Gateway.contains.Microsoft.AdvancedThreatAnalytics.1_8.Gateway.LightWeight | PerformanceHealth | True | False | Public |
| Monitor de paquete acumulativo de seguridad de puerta de enlace (ligera) | Microsoft.AdvancedThreatAnalytics.1_8.Container.Gateway.LightWeight.Security.RollupMonitor | Microsoft.AdvancedThreatAnalytics.1_8.Container.Gateway | WorstOf | System.Health.SecurityState | Microsoft.AdvancedThreatAnalytics.1_8.Container.Gateway.contains.Microsoft.AdvancedThreatAnalytics.1_8.Gateway.LightWeight | SecurityHealth | True | False | Public |
| Monitor de paquete acumulativo de disponibilidad de puerta de enlace (independiente) | Microsoft.AdvancedThreatAnalytics.1_8.Container.Gateway.Standalone.Availability.RollupMonitor | Microsoft.AdvancedThreatAnalytics.1_8.Container.Gateway | WorstOf | System.Health.AvailabilityState | Microsoft.AdvancedThreatAnalytics.1_8.Container.Gateway.contains.Microsoft.AdvancedThreatAnalytics.1_8.Gateway.Standalone | AvailabilityHealth | True | False | Public |
| Monitor de paquete acumulativo de configuración de puerta de enlace (independiente) | Microsoft.AdvancedThreatAnalytics.1_8.Container.Gateway.Standalone.Configuration.RollupMonitor | Microsoft.AdvancedThreatAnalytics.1_8.Container.Gateway | WorstOf | System.Health.ConfigurationState | Microsoft.AdvancedThreatAnalytics.1_8.Container.Gateway.contains.Microsoft.AdvancedThreatAnalytics.1_8.Gateway.Standalone | ConfigurationHealth | True | False | Public |
| Monitor de paquete acumulativo de rendimiento de puerta de enlace (independiente) | Microsoft.AdvancedThreatAnalytics.1_8.Container.Gateway.Standalone.Performance.RollupMonitor | Microsoft.AdvancedThreatAnalytics.1_8.Container.Gateway | WorstOf | System.Health.PerformanceState | Microsoft.AdvancedThreatAnalytics.1_8.Container.Gateway.contains.Microsoft.AdvancedThreatAnalytics.1_8.Gateway.Standalone | PerformanceHealth | True | False | Public |
| Monitor de paquete acumulativo de seguridad de puerta de enlace (independiente) | Microsoft.AdvancedThreatAnalytics.1_8.Container.Gateway.Standalone.Security.RollupMonitor | Microsoft.AdvancedThreatAnalytics.1_8.Container.Gateway | WorstOf | System.Health.SecurityState | Microsoft.AdvancedThreatAnalytics.1_8.Container.Gateway.contains.Microsoft.AdvancedThreatAnalytics.1_8.Gateway.Standalone | SecurityHealth | True | False | Public |
| Monitor de paquete acumulativo de disponibilidad de servicio (Centro) | Microsoft.AdvancedThreatAnalytics.1_8.Service.Center.Availability.RollupMonitor | Microsoft.AdvancedThreatAnalytics.1_8.Service | WorstOf | System.Health.AvailabilityState | Microsoft.AdvancedThreatAnalytics.1_8.Service.contains.Microsoft.AdvancedThreatAnalytics.1_8.Center | AvailabilityHealth | True | False | Public |
| Monitor de paquete acumulativo de configuración de servicio (Centro) | Microsoft.AdvancedThreatAnalytics.1_8.Service.Center.Configuration.RollupMonitor | Microsoft.AdvancedThreatAnalytics.1_8.Service | WorstOf | System.Health.ConfigurationState | Microsoft.AdvancedThreatAnalytics.1_8.Service.contains.Microsoft.AdvancedThreatAnalytics.1_8.Center | ConfigurationHealth | True | False | Public |
| Monitor de paquete acumulativo de rendimiento de servicio (Centro) | Microsoft.AdvancedThreatAnalytics.1_8.Service.Center.Performance.RollupMonitor | Microsoft.AdvancedThreatAnalytics.1_8.Service | WorstOf | System.Health.PerformanceState | Microsoft.AdvancedThreatAnalytics.1_8.Service.contains.Microsoft.AdvancedThreatAnalytics.1_8.Center | PerformanceHealth | True | False | Public |
| Monitor de paquete acumulativo de seguridad de servicio (Centro) | Microsoft.AdvancedThreatAnalytics.1_8.Service.Center.Security.RollupMonitor | Microsoft.AdvancedThreatAnalytics.1_8.Service | WorstOf | System.Health.SecurityState | Microsoft.AdvancedThreatAnalytics.1_8.Service.contains.Microsoft.AdvancedThreatAnalytics.1_8.Center | SecurityHealth | True | False | Public |
| Monitor de paquete acumulativo de disponibilidad de servicio (puerta de enlace) | Microsoft.AdvancedThreatAnalytics.1_8.Service.Gateway.Availability.RollupMonitor | Microsoft.AdvancedThreatAnalytics.1_8.Service | WorstOf | System.Health.AvailabilityState | Microsoft.AdvancedThreatAnalytics.1_8.Service.contains.Microsoft.AdvancedThreatAnalytics.1_8.Container.Gateway | AvailabilityHealth | True | False | Public |
| Monitor de paquete acumulativo de configuración de servicio (puerta de enlace) | Microsoft.AdvancedThreatAnalytics.1_8.Service.Gateway.Configuration.RollupMonitor | Microsoft.AdvancedThreatAnalytics.1_8.Service | WorstOf | System.Health.ConfigurationState | Microsoft.AdvancedThreatAnalytics.1_8.Service.contains.Microsoft.AdvancedThreatAnalytics.1_8.Container.Gateway | ConfigurationHealth | True | False | Public |
| Monitor de paquete acumulativo de rendimiento de servicio (puerta de enlace) | Microsoft.AdvancedThreatAnalytics.1_8.Service.Gateway.Performance.RollupMonitor | Microsoft.AdvancedThreatAnalytics.1_8.Service | WorstOf | System.Health.PerformanceState | Microsoft.AdvancedThreatAnalytics.1_8.Service.contains.Microsoft.AdvancedThreatAnalytics.1_8.Container.Gateway | PerformanceHealth | True | False | Public |
| Monitor de paquete acumulativo de seguridad de servicio (puerta de enlace) | Microsoft.AdvancedThreatAnalytics.1_8.Service.Gateway.Security.RollupMonitor | Microsoft.AdvancedThreatAnalytics.1_8.Service | WorstOf | System.Health.SecurityState | Microsoft.AdvancedThreatAnalytics.1_8.Service.contains.Microsoft.AdvancedThreatAnalytics.1_8.Container.Gateway | SecurityHealth | True | False | Public |
| Monitor de paquete acumulativo de disponibilidad de raíz | Microsoft.AdvancedThreatAnalytics.Container.Availability.RollupMonitor | Microsoft.AdvancedThreatAnalytics.Container | WorstOf | System.Health.AvailabilityState | Microsoft.AdvancedThreatAnalytics.Container.contains.Microsoft.AdvancedThreatAnalytics.1_8.Service | AvailabilityHealth | True | False | Public |
| Monitor de paquete acumulativo de configuración de raíz | Microsoft.AdvancedThreatAnalytics.Container.Configuration.RollupMonitor | Microsoft.AdvancedThreatAnalytics.Container | WorstOf | System.Health.ConfigurationState | Microsoft.AdvancedThreatAnalytics.Container.contains.Microsoft.AdvancedThreatAnalytics.1_8.Service | ConfigurationHealth | True | False | Public |
| Monitor de paquete acumulativo de rendimiento de raíz | Microsoft.AdvancedThreatAnalytics.Container.Performance.RollupMonitor | Microsoft.AdvancedThreatAnalytics.Container | WorstOf | System.Health.PerformanceState | Microsoft.AdvancedThreatAnalytics.Container.contains.Microsoft.AdvancedThreatAnalytics.1_8.Service | PerformanceHealth | True | False | Public |
| Monitor de paquete acumulativo de seguridad de raíz | Microsoft.AdvancedThreatAnalytics.Container.Security.RollupMonitor | Microsoft.AdvancedThreatAnalytics.Container | WorstOf | System.Health.SecurityState | Microsoft.AdvancedThreatAnalytics.Container.contains.Microsoft.AdvancedThreatAnalytics.1_8.Service | SecurityHealth | True | False | Public |
| DisplayName | ID | Target | Category | Enabled | Alert Generate | Accessibility | |
|---|---|---|---|---|---|---|---|
 | Monitor de servicio del Centro de ATA | Microsoft.AdvancedThreatAnalytics.1_8.Center.ATACenter | Microsoft.AdvancedThreatAnalytics.1_8.Center | AvailabilityHealth | True | True | Public |
| Tamaño de bloque de AtSVC de base de datos | Microsoft.AdvancedThreatAnalytics.1_8.Center.DatabaseAtSvcBlockSize.PerformanceHealth | Microsoft.AdvancedThreatAnalytics.1_8.Center | PerformanceHealth | True | True | Public |
| Tamaño de bloque de DirectoryServicesActivity de base de datos< | Microsoft.AdvancedThreatAnalytics.1_8.Center.DatabaseDirectoryServicesActivityBlockSize.PerformanceHealth | Microsoft.AdvancedThreatAnalytics.1_8.Center | PerformanceHealth | True | True | Public |
| Tamaño de bloque de DNS de base de datos | Microsoft.AdvancedThreatAnalytics.1_8.Center.DatabaseDnsBlockSize.PerformanceHealth | Microsoft.AdvancedThreatAnalytics.1_8.Center | PerformanceHealth | True | True | Public |
| Tamaño de bloque de DRSR de base de datos | Microsoft.AdvancedThreatAnalytics.1_8.Center.DatabaseDrsrBlockSize.PerformanceHealth | Microsoft.AdvancedThreatAnalytics.1_8.Center | PerformanceHealth | True | True | Public |
| Tamaño de bloque de GroupMembershipChangeEvent de base de datos | Microsoft.AdvancedThreatAnalytics.1_8.Center.DatabaseGroupMembershipChangeEventBlockSize.PerformanceHealth | Microsoft.AdvancedThreatAnalytics.1_8.Center | PerformanceHealth | True | True | Public |
| Tamaño de bloque de KerberosAP de base de datos | Microsoft.AdvancedThreatAnalytics.1_8.Center.DatabaseKerberosApBlockSize.PerformanceHealth | Microsoft.AdvancedThreatAnalytics.1_8.Center | PerformanceHealth | True | True | Public |
| Tamaño de bloque de KerberosAS de base de datos | Microsoft.AdvancedThreatAnalytics.1_8.Center.DatabaseKerberosAsBlockSize.PerformanceHealth | Microsoft.AdvancedThreatAnalytics.1_8.Center | PerformanceHealth | True | True | Public |
| Tamaño de bloque de KerberosTGS de base de datos | Microsoft.AdvancedThreatAnalytics.1_8.Center.DatabaseKerberosTgsBlockSize.PerformanceHealth | Microsoft.AdvancedThreatAnalytics.1_8.Center | PerformanceHealth | True | True | Public |
| Tamaño de bloque de LDAP de base de datos | Microsoft.AdvancedThreatAnalytics.1_8.Center.DatabaseLdapBlockSize.PerformanceHealth | Microsoft.AdvancedThreatAnalytics.1_8.Center | PerformanceHealth | True | True | Public |
| Tamaño de bloque de LogonEvent de base de datos | Microsoft.AdvancedThreatAnalytics.1_8.Center.DatabaseLogonEventBlockSize.PerformanceHealth | Microsoft.AdvancedThreatAnalytics.1_8.Center | PerformanceHealth | True | True | Public |
| Tamaño de bloque de LsaRPC de base de datos | Microsoft.AdvancedThreatAnalytics.1_8.Center.DatabaseLsaRpcBlockSize.PerformanceHealth | Microsoft.AdvancedThreatAnalytics.1_8.Center | PerformanceHealth | True | True | Public |
| Tamaño de bloque de Netlogon de base de datos | Microsoft.AdvancedThreatAnalytics.1_8.Center.DatabaseNetlogonBlockSize.PerformanceHealth | Microsoft.AdvancedThreatAnalytics.1_8.Center | PerformanceHealth | True | True | Public |
| Tamaño de bloque de NTLM de base de datos | Microsoft.AdvancedThreatAnalytics.1_8.Center.DatabaseNtlmBlockSize.PerformanceHealth | Microsoft.AdvancedThreatAnalytics.1_8.Center | PerformanceHealth | True | True | Public |
| Tamaño de bloque de NTLMEvent de base de datos | Microsoft.AdvancedThreatAnalytics.1_8.Center.DatabaseNtlmEventBlockSize.PerformanceHealth | Microsoft.AdvancedThreatAnalytics.1_8.Center | PerformanceHealth | True | True | Public |
| Tamaño de bloque de SAMR de base de datos | Microsoft.AdvancedThreatAnalytics.1_8.Center.DatabaseSamrBlockSize.PerformanceHealth | Microsoft.AdvancedThreatAnalytics.1_8.Center | PerformanceHealth | True | True | Public |
| Tamaño de bloque de ServiceControl de base de datos | Microsoft.AdvancedThreatAnalytics.1_8.Center.DatabaseServiceControlBlockSize.PerformanceHealth | Microsoft.AdvancedThreatAnalytics.1_8.Center | PerformanceHealth | True | True | Public |
| Tamaño de bloque de SMB de base de datos | Microsoft.AdvancedThreatAnalytics.1_8.Center.DatabaseSmbBlockSize.PerformanceHealth | Microsoft.AdvancedThreatAnalytics.1_8.Center | PerformanceHealth | True | True | Public |
| Tamaño de bloque de SrvSVC de base de datos | Microsoft.AdvancedThreatAnalytics.1_8.Center.DatabaseSrvSvcBlockSize.PerformanceHealth | Microsoft.AdvancedThreatAnalytics.1_8.Center | PerformanceHealth | True | True | Public |
| Tamaño de bloque de TaskScheduler de base de datos | Microsoft.AdvancedThreatAnalytics.1_8.Center.DatabaseTaskSchedulerBlockSize.PerformanceHealth | Microsoft.AdvancedThreatAnalytics.1_8.Center | PerformanceHealth | True | True | Public |
| Tamaño de bloque de VpnAuthenticationEvent de base de datos | Microsoft.AdvancedThreatAnalytics.1_8.Center.DatabaseVpnAuthenticationEventBlockSize.PerformanceHealth | Microsoft.AdvancedThreatAnalytics.1_8.Center | PerformanceHealth | True | True | Public |
| Tamaño de bloque de Wmi de base de datos | Microsoft.AdvancedThreatAnalytics.1_8.Center.DatabaseWmiBlockSize.PerformanceHealth | Microsoft.AdvancedThreatAnalytics.1_8.Center | PerformanceHealth | True | True | Public |
| Tamaño de bloque de actividad de red de EntityProfiler | Microsoft.AdvancedThreatAnalytics.1_8.Center.EntityProfilerNetworkActivityBlockSize.PerformanceHealth | Microsoft.AdvancedThreatAnalytics.1_8.Center | PerformanceHealth | True | True | Public |
| Tamaño de bloque de lote de entidad de EntityReceiver | Microsoft.AdvancedThreatAnalytics.1_8.Center.EntityReceiverEntityBatchBlockSize.PerformanceHealth | Microsoft.AdvancedThreatAnalytics.1_8.Center | PerformanceHealth | True | True | Public |
| Tamaño de bloque de actividad de red de NetworkActivityProcessor | Microsoft.AdvancedThreatAnalytics.1_8.Center.NetworkActivityProcessorNetworkActivityBlockSize.PerformanceHealth | Microsoft.AdvancedThreatAnalytics.1_8.Center | PerformanceHealth | True | True | Public |
| Monitor de servicio de MongoDB | Microsoft.AdvancedThreatAnalytics.1_8.Database.MongoDB | Microsoft.AdvancedThreatAnalytics.1_8.Database | AvailabilityHealth | True | True | Public |
| Monitor de servicio de puerta de enlace de ATA | Microsoft.AdvancedThreatAnalytics.1_8.Gateway.ATAGateway | Microsoft.AdvancedThreatAnalytics.1_8.Gateway | AvailabilityHealth | True | True | Public |
| Monitor de servicio Updater de puerta de enlace de ATA | Microsoft.AdvancedThreatAnalytics.1_8.Gateway.ATAGatewayUpdater | Microsoft.AdvancedThreatAnalytics.1_8.Gateway | AvailabilityHealth | True | True | Public |
| Tamaño de bloque de actividad de EntityResolver | Microsoft.AdvancedThreatAnalytics.1_8.Gateway.EntityResolverActivityBlockSize.PerformanceHealth | Microsoft.AdvancedThreatAnalytics.1_8.Gateway | PerformanceHealth | True | True | Public |
| Tamaño de bloque de lote de entidad de EntitySender | Microsoft.AdvancedThreatAnalytics.1_8.Gateway.EntitySenderEntityBatchBlockSize.PerformanceHealth | Microsoft.AdvancedThreatAnalytics.1_8.Gateway | PerformanceHealth | True | True | Public |
| Hora de envío de lote de entidad de EntitySender | Microsoft.AdvancedThreatAnalytics.1_8.Gateway.EntitySenderEntityBatchSendTime.PerformanceHealth | Microsoft.AdvancedThreatAnalytics.1_8.Gateway | PerformanceHealth | True | True | Public |
| Tamaño de bloque 0 de datos de mensaje de NetworkActivityTranslator | Microsoft.AdvancedThreatAnalytics.1_8.Gateway.NetworkActivityTranslatorMessageData0BlockSize.PerformanceHealth | Microsoft.AdvancedThreatAnalytics.1_8.Gateway | PerformanceHealth | True | True | Public |
| Eventos descartados/segundo de ETW de NetworkListener | Microsoft.AdvancedThreatAnalytics.1_8.Gateway.NetworkListenerETWDroppedEventsSec.PerformanceHealth | Microsoft.AdvancedThreatAnalytics.1_8.Gateway | PerformanceHealth | True | True | Public |
| Eventos descartados/segundo de PEF de NetworkListener | Microsoft.AdvancedThreatAnalytics.1_8.Gateway.NetworkListenerPEFDroppedEventsSec.PerformanceHealth | Microsoft.AdvancedThreatAnalytics.1_8.Gateway | PerformanceHealth | True | True | Public |
| DisplayName | ID | Target | Category | Enabled | Alert Generate | |
|---|---|---|---|---|---|---|
 | Regla de alerta de actividad sospechosa con comportamiento anormal | Microsoft.AdvancedThreatAnalytics.1_8.Center.AbnormalBehaviorSuspiciousActivity | Microsoft.AdvancedThreatAnalytics.1_8.Center | SecurityHealth | False | True |
| Regla de alerta de actividad sospechosa con protocolo anormal | Microsoft.AdvancedThreatAnalytics.1_8.Center.AbnormalProtocolSuspiciousActivity | Microsoft.AdvancedThreatAnalytics.1_8.Center | SecurityHealth | False | True |
| Regla de alerta de actividad sospechosa en cambio anormal de pertenencia a grupo confidencial | Microsoft.AdvancedThreatAnalytics.1_8.Center.AbnormalSensitiveGroupMembershipChangeSuspiciousActivity | Microsoft.AdvancedThreatAnalytics.1_8.Center | SecurityHealth | False | True |
| Regla de alerta de actividad sospechosa de VPN anormal | Microsoft.AdvancedThreatAnalytics.1_8.Center.AbnormalVpnSuspiciousActivity | Microsoft.AdvancedThreatAnalytics.1_8.Center | SecurityHealth | False | True |
| Regla de alerta de actividad sospechosa de enumeración de cuentas | Microsoft.AdvancedThreatAnalytics.1_8.Center.AccountEnumerationSuspiciousActivity | Microsoft.AdvancedThreatAnalytics.1_8.Center | SecurityHealth | False | True |
| Regla de alerta de actividad sospechosa de fuerza bruta | Microsoft.AdvancedThreatAnalytics.1_8.Center.BruteForceSuspiciousActivity | Microsoft.AdvancedThreatAnalytics.1_8.Center | SecurityHealth | False | True |
| ATA 1.8 - Regla de alerta de supervisión de espacio disponible en unidad de datos de base de datos del Centro | Microsoft.AdvancedThreatAnalytics.1_8.Center.CenterDatabaseDataDriveFreeSpaceMonitoringAlert | Microsoft.AdvancedThreatAnalytics.1_8.Center | AvailabilityHealth | True | True |
| ATA 1.8 - Regla de alerta de supervisión de desconexión de base de datos del Centro | Microsoft.AdvancedThreatAnalytics.1_8.Center.CenterDatabaseDisconnectedMonitoringAlert | Microsoft.AdvancedThreatAnalytics.1_8.Center | AvailabilityHealth | True | True |
| ATA 1.8 - Regla de alerta de supervisión de errores de resolución de la dirección IP externa del Centro | Microsoft.AdvancedThreatAnalytics.1_8.Center.CenterExternalIpAddressResolutionFailureMonitoringAlert | Microsoft.AdvancedThreatAnalytics.1_8.Center | AvailabilityHealth | True | True |
| ATA 1.8 - Regla de alerta de supervisión de correo del Centro | Microsoft.AdvancedThreatAnalytics.1_8.Center.CenterMailMonitoringAlert | Microsoft.AdvancedThreatAnalytics.1_8.Center | ConfigurationHealth | True | True |
| ATA 1.8 - Regla de alerta de supervisión del Centro que no recibe tráfico | Microsoft.AdvancedThreatAnalytics.1_8.Center.CenterNotReceivingTrafficMonitoringAlert | Microsoft.AdvancedThreatAnalytics.1_8.Center | AvailabilityHealth | True | True |
| ATA 1.8 - Regla de alerta de supervisión de Centro sobrecargado | Microsoft.AdvancedThreatAnalytics.1_8.Center.CenterOverloadedMonitoringAlert | Microsoft.AdvancedThreatAnalytics.1_8.Center | PerformanceHealth | True | True |
| ATA 1.8 - Regla de alerta de supervisión de Syslog del Centro | Microsoft.AdvancedThreatAnalytics.1_8.Center.CenterSyslogMonitoringAlert | Microsoft.AdvancedThreatAnalytics.1_8.Center | ConfigurationHealth | True | True |
| ATA 1.8 - Regla de alerta de supervisión de expiración del certificado | Microsoft.AdvancedThreatAnalytics.1_8.Center.CertificateExpiryMonitoringAlert | Microsoft.AdvancedThreatAnalytics.1_8.Center | ConfigurationHealth | True | True |
| Regla de alerta de actividad sospechosa con error de autenticación previa de equipo | Microsoft.AdvancedThreatAnalytics.1_8.Center.ComputerPreauthenticationFailedSuspiciousActivity | Microsoft.AdvancedThreatAnalytics.1_8.Center | SecurityHealth | False | True |
| Tamaño de bloque de AtSVC de base de datos | Microsoft.AdvancedThreatAnalytics.1_8.Center.DatabaseAtSvcBlockSize | Microsoft.AdvancedThreatAnalytics.1_8.Center | PerformanceCollection | True | False |
| Tamaño de bloque de DirectoryServicesActivity de base de datos | Microsoft.AdvancedThreatAnalytics.1_8.Center.DatabaseDirectoryServicesActivityBlockSize | Microsoft.AdvancedThreatAnalytics.1_8.Center | PerformanceCollection | True | False |
| Tamaño de bloque de DNS de base de datos | Microsoft.AdvancedThreatAnalytics.1_8.Center.DatabaseDnsBlockSize | Microsoft.AdvancedThreatAnalytics.1_8.Center | PerformanceCollection | True | False |
| Tamaño de bloque de DRSR de base de datos | Microsoft.AdvancedThreatAnalytics.1_8.Center.DatabaseDrsrBlockSize | Microsoft.AdvancedThreatAnalytics.1_8.Center | PerformanceCollection | True | False |
| Tamaño de bloque de KerberosAP de base de datos | Microsoft.AdvancedThreatAnalytics.1_8.Center.DatabaseKerberosApBlockSize | Microsoft.AdvancedThreatAnalytics.1_8.Center | PerformanceCollection | True | False |
| Tamaño de bloque de KerberosAS de base de datos | Microsoft.AdvancedThreatAnalytics.1_8.Center.DatabaseKerberosAsBlockSize | Microsoft.AdvancedThreatAnalytics.1_8.Center | PerformanceCollection | True | False |
| Tamaño de bloque de KerberosTGS de base de datos | Microsoft.AdvancedThreatAnalytics.1_8.Center.DatabaseKerberosTgsBlockSize | Microsoft.AdvancedThreatAnalytics.1_8.Center | PerformanceCollection | True | False |
| Tamaño de bloque de LDAP de base de datos | Microsoft.AdvancedThreatAnalytics.1_8.Center.DatabaseLdapBlockSize | Microsoft.AdvancedThreatAnalytics.1_8.Center | PerformanceCollection | True | False |
| Tamaño de bloque de LsaRPC de base de datos | Microsoft.AdvancedThreatAnalytics.1_8.Center.DatabaseLsaRpcBlockSize | Microsoft.AdvancedThreatAnalytics.1_8.Center | PerformanceCollection | True | False |
| Tamaño de bloque de Netlogon de base de datos | Microsoft.AdvancedThreatAnalytics.1_8.Center.DatabaseNetlogonBlockSize | Microsoft.AdvancedThreatAnalytics.1_8.Center | PerformanceCollection | True | False |
| Tamaño de bloque de NTLM de base de datos | Microsoft.AdvancedThreatAnalytics.1_8.Center.DatabaseNtlmBlockSize | Microsoft.AdvancedThreatAnalytics.1_8.Center | PerformanceCollection | True | False |
| Tamaño de bloque de NTLMEvent de base de datos | Microsoft.AdvancedThreatAnalytics.1_8.Center.DatabaseNtlmEventBlockSize | Microsoft.AdvancedThreatAnalytics.1_8.Center | PerformanceCollection | True | False |
| Tamaño de bloque de ServiceControl de base de datos | Microsoft.AdvancedThreatAnalytics.1_8.Center.DatabaseServiceControlBlockSize | Microsoft.AdvancedThreatAnalytics.1_8.Center | PerformanceCollection | True | False |
| Tamaño de bloque de SMB de base de datos | Microsoft.AdvancedThreatAnalytics.1_8.Center.DatabaseSmbBlockSize | Microsoft.AdvancedThreatAnalytics.1_8.Center | PerformanceCollection | True | False |
| Tamaño de bloque de SrvSVC de base de datos | Microsoft.AdvancedThreatAnalytics.1_8.Center.DatabaseSrvSvcBlockSize | Microsoft.AdvancedThreatAnalytics.1_8.Center | PerformanceCollection | True | False |
| Tamaño de bloque de TaskScheduler de base de datos | Microsoft.AdvancedThreatAnalytics.1_8.Center.DatabaseTaskSchedulerBlockSize | Microsoft.AdvancedThreatAnalytics.1_8.Center | PerformanceCollection | True | False |
| Regla de alerta de actividad sospechosa de replicación de Servicios de directorio | Microsoft.AdvancedThreatAnalytics.1_8.Center.DirectoryServicesReplicationSuspiciousActivity | Microsoft.AdvancedThreatAnalytics.1_8.Center | SecurityHealth | False | True |
| Regla de alerta de actividad sospechosa de reconocimiento de DNS | Microsoft.AdvancedThreatAnalytics.1_8.Center.DnsReconnaissanceSuspiciousActivity | Microsoft.AdvancedThreatAnalytics.1_8.Center | SecurityHealth | False | True |
| Regla de alerta de actividad sospechosa de degradación de cifrado | Microsoft.AdvancedThreatAnalytics.1_8.Center.EncryptionDowngradeSuspiciousActivity | Microsoft.AdvancedThreatAnalytics.1_8.Center | SecurityHealth | False | True |
| Tamaño de bloque de actividad de red de EntityProfiler | Microsoft.AdvancedThreatAnalytics.1_8.Center.EntityProfilerNetworkActivityBlockSize | Microsoft.AdvancedThreatAnalytics.1_8.Center | PerformanceCollection | True | False |
| Tamaño de bloque de lote de entidad de EntityReceiver | Microsoft.AdvancedThreatAnalytics.1_8.Center.EntityReceiverEntityBatchBlockSize | Microsoft.AdvancedThreatAnalytics.1_8.Center | PerformanceCollection | True | False |
| Regla de alerta de actividad sospechosa de degradación de cifrado (golden ticket) | Microsoft.AdvancedThreatAnalytics.1_8.Center.EnumerateSessionsSuspiciousActivity | Microsoft.AdvancedThreatAnalytics.1_8.Center | SecurityHealth | False | True |
| Regla de alerta de actividad sospechosa de degradación de cifrado (overpass-the-hash) | Microsoft.AdvancedThreatAnalytics.1_8.Center.ForgedPacSuspiciousActivity | Microsoft.AdvancedThreatAnalytics.1_8.Center | SecurityHealth | False | True |
| ATA 1.8 - Regla de alerta de supervisión de adaptadores de red de captura de una puerta de enlace con errores | Microsoft.AdvancedThreatAnalytics.1_8.Center.GatewayCaptureNetworkAdapterFaultedMonitoringAlert | Microsoft.AdvancedThreatAnalytics.1_8.Center | AvailabilityHealth | True | True |
| ATA 1.8 - Regla de alerta de supervisión de adaptadores de red de captura de una puerta de enlace no disponibles | Microsoft.AdvancedThreatAnalytics.1_8.Center.GatewayCaptureNetworkAdapterMissingMonitoringAlert | Microsoft.AdvancedThreatAnalytics.1_8.Center | ConfigurationHealth | True | True |
| ATA 1.8 - Regla de alerta de supervisión de expiración de contraseña de cuenta de cliente de Servicios de directorio de puerta de enlace | Microsoft.AdvancedThreatAnalytics.1_8.Center.GatewayDirectoryServicesClientAccountPasswordExpiryMonitoringAlert | Microsoft.AdvancedThreatAnalytics.1_8.Center | ConfigurationHealth | True | True |
| ATA 1.8 - Regla de alerta de supervisión de la conectividad del cliente de Servicios de directorio de puerta de enlace | Microsoft.AdvancedThreatAnalytics.1_8.Center.GatewayDirectoryServicesClientConnectivityMonitoringAlert | Microsoft.AdvancedThreatAnalytics.1_8.Center | AvailabilityHealth | True | True |
| ATA 1.8 - Regla de alerta de supervisión de puerta de enlace desconectada | Microsoft.AdvancedThreatAnalytics.1_8.Center.GatewayDisconnectedMonitoringAlert | Microsoft.AdvancedThreatAnalytics.1_8.Center | AvailabilityHealth | True | True |
| ATA 1.8 - Regla de alerta de supervisión de sincronizador de dominio de puerta de enlace no asignado | Microsoft.AdvancedThreatAnalytics.1_8.Center.GatewayDomainSynchronizerNotAssignedMonitoringAlert | Microsoft.AdvancedThreatAnalytics.1_8.Center | ConfigurationHealth | True | True |
| ATA 1.8 - Regla de alerta de supervisión de memoria baja de la puerta de enlace | Microsoft.AdvancedThreatAnalytics.1_8.Center.GatewayLowMemoryMonitoringAlert | Microsoft.AdvancedThreatAnalytics.1_8.Center | PerformanceHealth | True | True |
| ATA 1.8 - Regla de alerta de supervisión de actividades de eventos con puerta de enlace sobrecargada | Microsoft.AdvancedThreatAnalytics.1_8.Center.GatewayOverloadedEventActivitiesMonitoringAlert | Microsoft.AdvancedThreatAnalytics.1_8.Center | PerformanceHealth | True | True |
| ATA 1.8 - Regla de alerta de supervisión de actividades de red con puerta de enlace sobrecargada | Microsoft.AdvancedThreatAnalytics.1_8.Center.GatewayOverloadedNetworkActivitiesMonitoringAlert | Microsoft.AdvancedThreatAnalytics.1_8.Center | PerformanceHealth | True | True |
| ATA 1.8 - Regla de alerta de supervisión de escucha de eventos RADIUS de la puerta de enlace | Microsoft.AdvancedThreatAnalytics.1_8.Center.GatewayRadiusEventListenerMonitoringAlert | Microsoft.AdvancedThreatAnalytics.1_8.Center | AvailabilityHealth | True | True |
| ATA 1.8 - Regla de alerta de supervisión de puertas de enlace obsoletas | Microsoft.AdvancedThreatAnalytics.1_8.Center.GatewaysOutdatedMonitoringAlert | Microsoft.AdvancedThreatAnalytics.1_8.Center | ConfigurationHealth | True | True |
| ATA 1.8 - Regla de alerta de supervisión de error de inicio de la puerta de enlace | Microsoft.AdvancedThreatAnalytics.1_8.Center.GatewayStartFailureMonitoringAlert | Microsoft.AdvancedThreatAnalytics.1_8.Center | AvailabilityHealth | True | True |
| ATA 1.8 - Regla de alerta de supervisión de escucha de eventos Syslog de la puerta de enlace | Microsoft.AdvancedThreatAnalytics.1_8.Center.GatewaySyslogEventListenerMonitoringAlert | Microsoft.AdvancedThreatAnalytics.1_8.Center | AvailabilityHealth | True | True |
| Regla de alerta de actividad sospechosa de degradación de cifrado (llave maestra) | Microsoft.AdvancedThreatAnalytics.1_8.Center.GoldenTicketSuspiciousActivity | Microsoft.AdvancedThreatAnalytics.1_8.Center | SecurityHealth | False | True |
| Regla de alerta de actividad sospechosa de enumeración de sesiones | Microsoft.AdvancedThreatAnalytics.1_8.Center.HoneytokenActivitySuspiciousActivity | Microsoft.AdvancedThreatAnalytics.1_8.Center | SecurityHealth | False | True |
| Regla de alerta de actividad sospechosa de PAC falsificado | Microsoft.AdvancedThreatAnalytics.1_8.Center.LdapBruteForceSuspiciousActivity | Microsoft.AdvancedThreatAnalytics.1_8.Center | SecurityHealth | False | True |
| Regla de alerta de actividad sospechosa de honeytoken | Microsoft.AdvancedThreatAnalytics.1_8.Center.LdapCleartextPasswordSuspiciousActivity | Microsoft.AdvancedThreatAnalytics.1_8.Center | SecurityHealth | False | True |
| Regla de alerta de actividad sospechosa de contraseña de texto no cifrado de enlace simple de LDAP | Microsoft.AdvancedThreatAnalytics.1_8.Center.MassiveObjectDeletionSuspiciousActivity | Microsoft.AdvancedThreatAnalytics.1_8.Center | SecurityHealth | False | True |
| Tamaño de bloque de actividad de red de NetworkActivityProcessor | Microsoft.AdvancedThreatAnalytics.1_8.Center.NetworkActivityProcessorNetworkActivityBlockSize | Microsoft.AdvancedThreatAnalytics.1_8.Center | PerformanceCollection | True | False |
| Regla de alerta de actividad sospechosa de eliminación masiva de objetos | Microsoft.AdvancedThreatAnalytics.1_8.Center.PassTheHashSuspiciousActivity | Microsoft.AdvancedThreatAnalytics.1_8.Center | SecurityHealth | False | True |
| Regla de alerta de actividad pass-the-hash sospechosa | Microsoft.AdvancedThreatAnalytics.1_8.Center.PassTheTicketSuspiciousActivity | Microsoft.AdvancedThreatAnalytics.1_8.Center | SecurityHealth | False | True |
| Regla de alerta de actividad pass-the-ticket sospechosa | Microsoft.AdvancedThreatAnalytics.1_8.Center.RemoteExecutionSuspiciousActivity | Microsoft.AdvancedThreatAnalytics.1_8.Center | SecurityHealth | False | True |
| Regla de alerta de actividad sospechosa de ejecución remota | Microsoft.AdvancedThreatAnalytics.1_8.Center.RetrieveDataProtectionBackupKeySuspiciousActivity | Microsoft.AdvancedThreatAnalytics.1_8.Center | SecurityHealth | False | True |
| Regla de alerta de actividad sospechosa de recuperación de clave de copia de seguridad de protección de datos | Microsoft.AdvancedThreatAnalytics.1_8.Center.SamrReconnaissanceSuspiciousActivity | Microsoft.AdvancedThreatAnalytics.1_8.Center | SecurityHealth | False | True |
| La puerta de enlace de ATA no se pudo autenticar en el controlador de dominio. | Microsoft.AdvancedThreatAnalytics.1_8.Gateway.ActiveDirectoryAuthenticationFailure | Microsoft.AdvancedThreatAnalytics.1_8.Gateway | AvailabilityHealth | True | True |
| Puede que los contadores estén deshabilitados en el Registro. | Microsoft.AdvancedThreatAnalytics.1_8.Gateway.CountersDisabled | Microsoft.AdvancedThreatAnalytics.1_8.Gateway | AvailabilityHealth | True | True |
| Tamaño de bloque de actividad de EntityResolver | Microsoft.AdvancedThreatAnalytics.1_8.Gateway.EntityResolverActivityBlockSize | Microsoft.AdvancedThreatAnalytics.1_8.Gateway | PerformanceCollection | True | False |
| Tamaño de bloque de lote de entidad de EntitySender | Microsoft.AdvancedThreatAnalytics.1_8.Gateway.EntitySenderEntityBatchBlockSize | Microsoft.AdvancedThreatAnalytics.1_8.Gateway | PerformanceCollection | True | False |
| Hora de envío de lote de entidad de EntitySender | Microsoft.AdvancedThreatAnalytics.1_8.Gateway.EntitySenderEntityBatchSendTime | Microsoft.AdvancedThreatAnalytics.1_8.Gateway | PerformanceCollection | True | False |
| La puerta de enlace de ATA no se pudo autenticar en el Centro. | Microsoft.AdvancedThreatAnalytics.1_8.Gateway.FailedToAuthenticateAgainstCenter | Microsoft.AdvancedThreatAnalytics.1_8.Gateway | AvailabilityHealth | True | True |
| La puerta de enlace de ATA no pudo establecer conexión con el Centro de ATA. | Microsoft.AdvancedThreatAnalytics.1_8.Gateway.FailedToEstablishConnectionToCenter | Microsoft.AdvancedThreatAnalytics.1_8.Gateway | AvailabilityHealth | True | True |
| La puerta de enlace de ATA no pudo analizar el mensaje de Syslog de SIEM. | Microsoft.AdvancedThreatAnalytics.1_8.Gateway.FailedToParseSyslog | Microsoft.AdvancedThreatAnalytics.1_8.Gateway | AvailabilityHealth | True | True |
| La puerta de enlace de ATA no pudo consultar el controlador de dominio mediante el protocolo LDAP. | Microsoft.AdvancedThreatAnalytics.1_8.Gateway.FailedToQueryDCUsingLDAPProtocol | Microsoft.AdvancedThreatAnalytics.1_8.Gateway | AvailabilityHealth | True | True |
| La puerta de enlace de ATA no pudo sincronizar la configuración del Centro de ATA. | Microsoft.AdvancedThreatAnalytics.1_8.Gateway.FailedToSynchronizeConfigurationFromCenter | Microsoft.AdvancedThreatAnalytics.1_8.Gateway | AvailabilityHealth | True | True |
| La puerta de enlace de ATA no pudo validar la cadena de certificados del Centro. | Microsoft.AdvancedThreatAnalytics.1_8.Gateway.FailedToValidateCenterCertificateChain | Microsoft.AdvancedThreatAnalytics.1_8.Gateway | AvailabilityHealth | True | True |
| La puerta de enlace de ATA no tiene suficiente memoria. | Microsoft.AdvancedThreatAnalytics.1_8.Gateway.GatewayDoesNotHaveEnoughMemory | Microsoft.AdvancedThreatAnalytics.1_8.Gateway | AvailabilityHealth | True | True |
| Tamaño máx. de memoria asignada de GatewayUpdaterResourceManager | Microsoft.AdvancedThreatAnalytics.1_8.Gateway.GatewayUpdaterResourceManagerCommitMemoryMaxSize | Microsoft.AdvancedThreatAnalytics.1_8.Gateway | PerformanceCollection | True | False |
| Porcentaje máx. de tiempo de CPU de GatewayUpdaterResourceManager | Microsoft.AdvancedThreatAnalytics.1_8.Gateway.GatewayUpdaterResourceManagerCPUTimeMax_ | Microsoft.AdvancedThreatAnalytics.1_8.Gateway | PerformanceCollection | True | False |
| Tamaño límite de espacio de trabajo de GatewayUpdaterResourceManager | Microsoft.AdvancedThreatAnalytics.1_8.Gateway.GatewayUpdaterResourceManagerWorkingSetLimitSize | Microsoft.AdvancedThreatAnalytics.1_8.Gateway | PerformanceCollection | True | False |
| Hay una entrada de host en el archivo HOSTS que apunta al nombre corto de la máquina. | Microsoft.AdvancedThreatAnalytics.1_8.Gateway.HostEntryInHOSTSFile | Microsoft.AdvancedThreatAnalytics.1_8.Gateway | AvailabilityHealth | True | True |
| Analizador de mensajes está instalado en la puerta de enlace de ATA. | Microsoft.AdvancedThreatAnalytics.1_8.Gateway.MessageAnalyzerIsInstalledOnGateway | Microsoft.AdvancedThreatAnalytics.1_8.Gateway | AvailabilityHealth | True | True |
| Tamaño de bloque 0 de datos de mensaje de NetworkActivityTranslator | Microsoft.AdvancedThreatAnalytics.1_8.Gateway.NetworkActivityTranslatorMessageData0BlockSize | Microsoft.AdvancedThreatAnalytics.1_8.Gateway | PerformanceCollection | True | False |
| Eventos descartados/segundo de ETW de NetworkListener | Microsoft.AdvancedThreatAnalytics.1_8.Gateway.NetworkListenerETWDroppedEvents_Sec | Microsoft.AdvancedThreatAnalytics.1_8.Gateway | PerformanceCollection | True | False |
| Eventos descartados/segundo de PEF de NetworkListener | Microsoft.AdvancedThreatAnalytics.1_8.Gateway.NetworkListenerPEFDroppedEvents_Sec | Microsoft.AdvancedThreatAnalytics.1_8.Gateway | PerformanceCollection | True | False |
| Mensajes analizados/segundo de PEF de NetworkListener | Microsoft.AdvancedThreatAnalytics.1_8.Gateway.NetworkListenerPEFParsedMessages_Sec | Microsoft.AdvancedThreatAnalytics.1_8.Gateway | PerformanceCollection | True | False |
| Hay otras instalaciones pendientes en el equipo. | Microsoft.AdvancedThreatAnalytics.1_8.Gateway.OtherPendingInstallations | Microsoft.AdvancedThreatAnalytics.1_8.Gateway | AvailabilityHealth | True | True |
| PEF (Analizador de mensajes) no se instaló correctamente. | Microsoft.AdvancedThreatAnalytics.1_8.Gateway.PEFWasNotInstalledCorrectly | Microsoft.AdvancedThreatAnalytics.1_8.Gateway | AvailabilityHealth | True | True |
| Se habilitaron PID para los nombres de proceso de la puerta de enlace de ATA. | Microsoft.AdvancedThreatAnalytics.1_8.Gateway.PIDsWasEnabledForProcessNamesInGateway | Microsoft.AdvancedThreatAnalytics.1_8.Gateway | AvailabilityHealth | True | True |
| DisplayName | ID | Target | Accessibility | Category | Enabled | |
|---|---|---|---|---|---|---|
 | Reiniciar el servicio ATACenter | Microsoft.AdvancedThreatAnalytics.1_8.Center.ATACenter.Restart | Microsoft.AdvancedThreatAnalytics.1_8.Center | Internal | Maintenance | True |
| Iniciar el servicio ATACenter | Microsoft.AdvancedThreatAnalytics.1_8.Center.ATACenter.Start | Microsoft.AdvancedThreatAnalytics.1_8.Center | Internal | Maintenance | True |
| Detener el servicio ATACenter | Microsoft.AdvancedThreatAnalytics.1_8.Center.ATACenter.Stop | Microsoft.AdvancedThreatAnalytics.1_8.Center | Internal | Maintenance | True |
| Reiniciar el servicio MongoDB | Microsoft.AdvancedThreatAnalytics.1_8.Database.MongoDB.Restart | Microsoft.AdvancedThreatAnalytics.1_8.Database | Internal | Maintenance | True |
| Iniciar el servicio MongoDB | Microsoft.AdvancedThreatAnalytics.1_8.Database.MongoDB.Start | Microsoft.AdvancedThreatAnalytics.1_8.Database | Internal | Maintenance | True |
| Detener el servicio MongoDB | Microsoft.AdvancedThreatAnalytics.1_8.Database.MongoDB.Stop | Microsoft.AdvancedThreatAnalytics.1_8.Database | Internal | Maintenance | True |
| Reiniciar el servicio ATAGateway | Microsoft.AdvancedThreatAnalytics.1_8.Gateway.ATAGateway.Restart | Microsoft.AdvancedThreatAnalytics.1_8.Gateway | Internal | Maintenance | True |
| Iniciar el servicio ATAGateway | Microsoft.AdvancedThreatAnalytics.1_8.Gateway.ATAGateway.Start | Microsoft.AdvancedThreatAnalytics.1_8.Gateway | Internal | Maintenance | True |
| Detener el servicio ATAGateway | Microsoft.AdvancedThreatAnalytics.1_8.Gateway.ATAGateway.Stop | Microsoft.AdvancedThreatAnalytics.1_8.Gateway | Internal | Maintenance | True |
| Reiniciar el servicio ATAGatewayUpdater | Microsoft.AdvancedThreatAnalytics.1_8.Gateway.ATAGatewayUpdater.Restart | Microsoft.AdvancedThreatAnalytics.1_8.Gateway | Internal | Maintenance | True |
| Iniciar el servicio ATAGatewayUpdater | Microsoft.AdvancedThreatAnalytics.1_8.Gateway.ATAGatewayUpdater.Start | Microsoft.AdvancedThreatAnalytics.1_8.Gateway | Internal | Maintenance | True |
| Detener el servicio ATAGatewayUpdater | Microsoft.AdvancedThreatAnalytics.1_8.Gateway.ATAGatewayUpdater.Stop | Microsoft.AdvancedThreatAnalytics.1_8.Gateway | Internal | Maintenance | True |
| DisplayName | ID | Target | Accessibility | Enabled | |
|---|---|---|---|---|---|
 | Abrir tarea de la consola del Centro ATA | Microsoft.AdvancedThreatAnalytics.1_8.Center.ATAConsole.Task | Microsoft.AdvancedThreatAnalytics.1_8.Center | Internal | True |
| ID | FolderName | ElementID | |
|---|---|---|---|
 | Microsoft.AdvancedThreatAnalytics.1_8.Center.SecurityAlerts.FolderItem | Microsoft.AdvancedThreatAnalytics.1_8.Folder.Root | Microsoft.AdvancedThreatAnalytics.1_8.Center.SecurityAlerts |
| Microsoft.AdvancedThreatAnalytics.1_8.HealthAlerts.FolderItem | Microsoft.AdvancedThreatAnalytics.1_8.Folder.Root | Microsoft.AdvancedThreatAnalytics.1_8.HealthAlerts |
| Microsoft.AdvancedThreatAnalytics.1_8.PerformanceAlerts.FolderItem | Microsoft.AdvancedThreatAnalytics.1_8.Folder.Root | Microsoft.AdvancedThreatAnalytics.1_8.PerformanceAlerts |
| Microsoft.AdvancedThreatAnalytics.1_8.StateGrid.FolderItem | Microsoft.AdvancedThreatAnalytics.1_8.Folder.Root | Microsoft.AdvancedThreatAnalytics.1_8.StateGrid |
| DisplayName | ID | ParentFolder | Accessibility | |
|---|---|---|---|---|
| Advanced Threat Analytics 1.8 | Microsoft.AdvancedThreatAnalytics.1_8.Folder.Root | Microsoft.AdvancedThreatAnalytics.Folder.Root | Public |
| DisplayName | ID | ImageID | |
|---|---|---|---|
 | Centro Advanced Threat Analytics 1.8 | Microsoft.AdvancedThreatAnalytics.1_8.Center | Microsoft.AdvancedThreatAnalytics.Center.Small.Icon |
| Contenedor de puerta de enlace de Advanced Threat Analytics 1.8 | Microsoft.AdvancedThreatAnalytics.1_8.Container.Gateway | Microsoft.AdvancedThreatAnalytics.Container.Gateway.Small.Icon |
| Puerta de enlace ligera de Advanced Threat Analytics 1.8 | Microsoft.AdvancedThreatAnalytics.1_8.Gateway.LightWeight | Microsoft.AdvancedThreatAnalytics.LightweightGateway.Small.Icon |
| Puerta de enlace independiente de Advanced Threat Analytics 1.8 | Microsoft.AdvancedThreatAnalytics.1_8.Gateway.Standalone | Microsoft.AdvancedThreatAnalytics.Gateway.Standalone.Small.Icon |
| Servicio de Advanced Threat Analytics 1.8 | Microsoft.AdvancedThreatAnalytics.1_8.Service | Microsoft.AdvancedThreatAnalytics.Service.Small.Icon |
| DisplayName | ID | Target | Type | Accessibility | Visible | |
|---|---|---|---|---|---|---|
 | Alertas de seguridad | Microsoft.AdvancedThreatAnalytics.1_8.Center.SecurityAlerts | Microsoft.AdvancedThreatAnalytics.1_8.Center | Microsoft.SystemCenter.AlertViewType | Internal | True |
| Alertas de estado | Microsoft.AdvancedThreatAnalytics.1_8.HealthAlerts | Microsoft.AdvancedThreatAnalytics.1_8.InstancesGroup | Microsoft.SystemCenter.AlertViewType | Public | True |
| Alertas de rendimiento | Microsoft.AdvancedThreatAnalytics.1_8.PerformanceAlerts | Microsoft.AdvancedThreatAnalytics.1_8.InstancesGroup | Microsoft.SystemCenter.AlertViewType | Public | True |
| ID | Type | Platform | Target | Accessibility | |
|---|---|---|---|---|---|
 | Microsoft.AdvancedThreatAnalytics.1_8.StateGrid.Center.Implementation | Microsoft.AdvancedThreatAnalytics.1_8.StateGrid.Center | Wpf, Silverlight | Public | |
| Microsoft.AdvancedThreatAnalytics.1_8.StateGrid.Details.Implementation | Microsoft.AdvancedThreatAnalytics.1_8.StateGrid.Details | Wpf, Silverlight | Public | |
| Microsoft.AdvancedThreatAnalytics.1_8.StateGrid.Gateway.Implementation | Microsoft.AdvancedThreatAnalytics.1_8.StateGrid.Gateway | Wpf, Silverlight | Public | |
| Microsoft.AdvancedThreatAnalytics.1_8.StateGrid.Implementation | Microsoft.AdvancedThreatAnalytics.1_8.StateGrid | Wpf, Silverlight | Public |
| ID | Type | Parent | Accessibility | |
|---|---|---|---|---|
| Microsoft.AdvancedThreatAnalytics.1_8.StateGrid.Center.Reference | Microsoft.AdvancedThreatAnalytics.1_8.StateGrid.Center | Microsoft.AdvancedThreatAnalytics.1_8.StateGrid | Public |
| Microsoft.AdvancedThreatAnalytics.1_8.StateGrid.Details.Reference | Microsoft.AdvancedThreatAnalytics.1_8.StateGrid.Details | Microsoft.AdvancedThreatAnalytics.1_8.StateGrid | Public |
| Microsoft.AdvancedThreatAnalytics.1_8.StateGrid.Gateway.Reference | Microsoft.AdvancedThreatAnalytics.1_8.StateGrid.Gateway | Microsoft.AdvancedThreatAnalytics.1_8.StateGrid | Public |
| Microsoft.AdvancedThreatAnalytics.1_8.StateGrid.Reference | Microsoft.AdvancedThreatAnalytics.1_8.StateGrid | Microsoft.AdvancedThreatAnalytics.1_8.Folder.Root | Public |
| DisplayName | ID | Accessibility | |
|---|---|---|---|
| Estado de mantenimiento | Microsoft.AdvancedThreatAnalytics.1_8.StateGrid | Public |
| Estado de mantenimiento: Centro | Microsoft.AdvancedThreatAnalytics.1_8.StateGrid.Center | Public |
| Estado de mantenimiento: detalles | Microsoft.AdvancedThreatAnalytics.1_8.StateGrid.Details | Public |
| Estado de mantenimiento: puerta de enlace | Microsoft.AdvancedThreatAnalytics.1_8.StateGrid.Gateway | Public |
Home
ESN 
Show Management Pack References