Management pack voor Microsoft Advanced Threat Analytics 1.8
Dit is het management pack voor Advanced Threat Analytics 1.8. Dit management pack bevat alle klassen, weergaven, monitors en detectiefuncties voor ATA 1.8.
| DisplayName | ID | Base Class | Abstract | Hosted | Singleton | Group | Extension | Accessibility | |
|---|---|---|---|---|---|---|---|---|---|
 | Advanced Threat Analytics 1.8 Center | Microsoft.AdvancedThreatAnalytics.1_8.Center | Microsoft.Windows.ComputerRole | False | True | False | False | False | Public |
 | Advanced Threat Analytics 1.8-gatewaycontainer | Microsoft.AdvancedThreatAnalytics.1_8.Container.Gateway | Microsoft.AdvancedThreatAnalytics.ServiceComponent | False | False | False | False | False | Public |
 | Advanced Threat Analytics 1.8-database | Microsoft.AdvancedThreatAnalytics.1_8.Database | System.Database | False | True | False | False | False | Public |
 | Advanced Threat Analytics 1.8-gateway | Microsoft.AdvancedThreatAnalytics.1_8.Gateway | Microsoft.Windows.ComputerRole | True | True | False | False | False | Public |
 | Lightweight Advanced Threat Analytics 1.8-gateway | Microsoft.AdvancedThreatAnalytics.1_8.Gateway.LightWeight | Microsoft.AdvancedThreatAnalytics.1_8.Gateway | False | True | False | False | False | Public |
 | Zelfstandige Advanced Threat Analytics 1.8-gateway | Microsoft.AdvancedThreatAnalytics.1_8.Gateway.Standalone | Microsoft.AdvancedThreatAnalytics.1_8.Gateway | False | True | False | False | False | Public |
 | Groep Advanced Threat Analytics 1.8-exemplaren | Microsoft.AdvancedThreatAnalytics.1_8.InstancesGroup | Microsoft.SystemCenter.InstanceGroup | False | False | True | True | False | Public |
 | Advanced Threat Analytics 1.8-seed-klasse | Microsoft.AdvancedThreatAnalytics.1_8.Seed | Microsoft.Windows.LocalApplication | False | True | False | False | False | Public |
 | Groep Advanced Threat Analytics 1.8-servers | Microsoft.AdvancedThreatAnalytics.1_8.ServersGroup | Microsoft.SystemCenter.ComputerGroup | False | False | True | True | False | Public |
 | Advanced Threat Analytics 1.8-service | Microsoft.AdvancedThreatAnalytics.1_8.Service | Microsoft.AdvancedThreatAnalytics.ServiceComponent | False | False | False | False | False | Public |
| Advanced Threat Analytics 1.8-servicegroep | Microsoft.AdvancedThreatAnalytics.1_8.ServiceGroup | Microsoft.SystemCenter.InstanceGroup | False | False | True | True | False | Public |
| DisplayName | ID | Source | Target | Accessibility | Abstract | |
|---|---|---|---|---|---|---|
 | Microsoft Advanced Threat Analytics 1.8 Center is host voor de 1.8-database | Microsoft.AdvancedThreatAnalytics.1_8.Center.hosts.Microsoft.AdvancedThreatAnalytics.1_8.Database | Microsoft.AdvancedThreatAnalytics.1_8.Center | Microsoft.AdvancedThreatAnalytics.1_8.Database | Public | False |
| De Advanced Threat Analytics 1.8-container (gateway) bevat de lightweight 1.8-gateway | Microsoft.AdvancedThreatAnalytics.1_8.Container.Gateway.contains.Microsoft.AdvancedThreatAnalytics.1_8.Gateway.LightWeight | Microsoft.AdvancedThreatAnalytics.1_8.Container.Gateway | Microsoft.AdvancedThreatAnalytics.1_8.Gateway.LightWeight | Public | False |
| De Advanced Threat Analytics 1.8-container (gateway) bevat de zelfstandige 1.8-gateway | Microsoft.AdvancedThreatAnalytics.1_8.Container.Gateway.contains.Microsoft.AdvancedThreatAnalytics.1_8.Gateway.Standalone | Microsoft.AdvancedThreatAnalytics.1_8.Container.Gateway | Microsoft.AdvancedThreatAnalytics.1_8.Gateway.Standalone | Public | False |
| De Advanced Threat Analytics 1.8-service bevat 1.8 Center | Microsoft.AdvancedThreatAnalytics.1_8.Service.contains.Microsoft.AdvancedThreatAnalytics.1_8.Center | Microsoft.AdvancedThreatAnalytics.1_8.Service | Microsoft.AdvancedThreatAnalytics.1_8.Center | Public | False |
| De Advanced Threat Analytics 1.8-service bevat de 1.8-container (gateway) | Microsoft.AdvancedThreatAnalytics.1_8.Service.contains.Microsoft.AdvancedThreatAnalytics.1_8.Container.Gateway | Microsoft.AdvancedThreatAnalytics.1_8.Service | Microsoft.AdvancedThreatAnalytics.1_8.Container.Gateway | Public | False |
| De Advanced Threat Analytics-container bevat de 1.8-service | Microsoft.AdvancedThreatAnalytics.Container.contains.Microsoft.AdvancedThreatAnalytics.1_8.Service | Microsoft.AdvancedThreatAnalytics.Container | Microsoft.AdvancedThreatAnalytics.1_8.Service | Public | False |
| DisplayName | ID | Isolation | Accessibility | |
|---|---|---|---|---|
 | Gegevensbron voor Advanced Threat Analytics 1.8 Center-detectie | Microsoft.AdvancedThreatAnalytics.1_8.Center.Discovery.DataSource | Any | Internal |
| Gegevensbron voor detectie van gedistribueerde toepassingen van Advanced Threat Analytics 1.8 | Microsoft.AdvancedThreatAnalytics.1_8.DistributedApplication.Discovery.DataSource | Any | Internal |
| Gegevensbron voor de Advanced Threat Analytics 1.8-gatewaydetectie | Microsoft.AdvancedThreatAnalytics.1_8.Gateway.Discovery.DataSource | Any | Internal |
| Provider van ATA-logboekbestand | Microsoft.AdvancedThreatAnalytics.LogFileProvider | Any | Internal |
| ID | Target | |
|---|---|---|
 | Microsoft.AdvancedThreatAnalytics.1_8.Center.ATAConsole.Task.Category | Microsoft.AdvancedThreatAnalytics.1_8.Center.ATAConsole.Task |
| Microsoft.AdvancedThreatAnalytics.1_8.Center.Icon.Category | Microsoft.AdvancedThreatAnalytics.Center.Icon |
| Microsoft.AdvancedThreatAnalytics.1_8.Center.Small.Icon.Category | Microsoft.AdvancedThreatAnalytics.Center.Small.Icon |
| Microsoft.AdvancedThreatAnalytics.1_8.Container.Gateway.Icon.Category | Microsoft.AdvancedThreatAnalytics.Container.Gateway.Icon |
| Microsoft.AdvancedThreatAnalytics.1_8.Container.Gateway.Small.Icon.Category | Microsoft.AdvancedThreatAnalytics.Container.Gateway.Small.Icon |
| Microsoft.AdvancedThreatAnalytics.1_8.Gateway.Standalone.Icon.Category | Microsoft.AdvancedThreatAnalytics.Gateway.Standalone.Icon |
| Microsoft.AdvancedThreatAnalytics.1_8.Gateway.Standalone.Small.Icon.Category | Microsoft.AdvancedThreatAnalytics.Gateway.Standalone.Small.Icon |
| Microsoft.AdvancedThreatAnalytics.1_8.LightweightGateway.Icon.Category | Microsoft.AdvancedThreatAnalytics.LightweightGateway.Icon |
| Microsoft.AdvancedThreatAnalytics.1_8.LightweightGateway.Small.Icon.Category | Microsoft.AdvancedThreatAnalytics.LightweightGateway.Small.Icon |
| Microsoft.AdvancedThreatAnalytics.1_8.Service.Icon.Category | Microsoft.AdvancedThreatAnalytics.Service.Icon |
| Microsoft.AdvancedThreatAnalytics.1_8.Service.Small.Icon.Category | Microsoft.AdvancedThreatAnalytics.Service.Small.Icon |
| DisplayName | ID | Target | Enabled | |
|---|---|---|---|---|
 | Advanced Threat Analytics 1.8 Center-detectie | Microsoft.AdvancedThreatAnalytics.1_8.Center.Discovery | Microsoft.AdvancedThreatAnalytics.1_8.Seed | True |
| Detectie van gedistribueerde toepassingen van Advanced Threat Analytics 1.8 | Microsoft.AdvancedThreatAnalytics.1_8.DistributedApplication.Discovery | Microsoft.SystemCenter.AllManagementServersPool | True |
| Advanced Threat Analytics 1.8-gatewaydetectie | Microsoft.AdvancedThreatAnalytics.1_8.Gateway.Discovery | Microsoft.AdvancedThreatAnalytics.1_8.Seed | True |
| Advanced Threat Analytics 1.8-detectie van exemplaargroep | Microsoft.AdvancedThreatAnalytics.1_8.InstancesGroup.Discovery | Microsoft.AdvancedThreatAnalytics.1_8.InstancesGroup | True |
| Advanced Threat Analytics 1.8-seed-detectie | Microsoft.AdvancedThreatAnalytics.1_8.Seed.Discovery | Microsoft.Windows.Server.OperatingSystem | True |
| Detectie van de Advanced Threat Analytics 1.8-groep met servers | Microsoft.AdvancedThreatAnalytics.1_8.ServersGroup.Discovery | Microsoft.AdvancedThreatAnalytics.1_8.ServersGroup | True |
| Detectie van Advanced Threat Analytics 1.8-servicegroep | Microsoft.AdvancedThreatAnalytics.1_8.ServiceGroup.Discovery | Microsoft.AdvancedThreatAnalytics.1_8.ServiceGroup | True |
| DisplayName | ID | Target | Algorithm | Source Monitor | Relationship | Category | Enabled | Alert Generate | Accessibility | |
|---|---|---|---|---|---|---|---|---|---|---|
 | Totaliseringsmonitor beschikbaarheid Center | Microsoft.AdvancedThreatAnalytics.1_8.Center.Availability.RollupMonitor | Microsoft.AdvancedThreatAnalytics.1_8.Center | WorstOf | System.Health.AvailabilityState | Microsoft.AdvancedThreatAnalytics.1_8.Center.hosts.Microsoft.AdvancedThreatAnalytics.1_8.Database | AvailabilityHealth | True | False | Public |
| Totaliseringsmonitor configuratie Center | Microsoft.AdvancedThreatAnalytics.1_8.Center.Configuration.RollupMonitor | Microsoft.AdvancedThreatAnalytics.1_8.Center | WorstOf | System.Health.ConfigurationState | Microsoft.AdvancedThreatAnalytics.1_8.Center.hosts.Microsoft.AdvancedThreatAnalytics.1_8.Database | ConfigurationHealth | True | False | Public |
| Totaliseringsmonitor prestaties Center | Microsoft.AdvancedThreatAnalytics.1_8.Center.Performance.RollupMonitor | Microsoft.AdvancedThreatAnalytics.1_8.Center | WorstOf | System.Health.PerformanceState | Microsoft.AdvancedThreatAnalytics.1_8.Center.hosts.Microsoft.AdvancedThreatAnalytics.1_8.Database | PerformanceHealth | True | False | Public |
| Totaliseringsmonitor beveiliging Center | Microsoft.AdvancedThreatAnalytics.1_8.Center.Security.RollupMonitor | Microsoft.AdvancedThreatAnalytics.1_8.Center | WorstOf | System.Health.SecurityState | Microsoft.AdvancedThreatAnalytics.1_8.Center.hosts.Microsoft.AdvancedThreatAnalytics.1_8.Database | SecurityHealth | True | False | Public |
| Totaliseringsmonitor voor beschikbaarheid van gateway (Lightweight) | Microsoft.AdvancedThreatAnalytics.1_8.Container.Gateway.LightWeight.Availability.RollupMonitor | Microsoft.AdvancedThreatAnalytics.1_8.Container.Gateway | WorstOf | System.Health.AvailabilityState | Microsoft.AdvancedThreatAnalytics.1_8.Container.Gateway.contains.Microsoft.AdvancedThreatAnalytics.1_8.Gateway.LightWeight | AvailabilityHealth | True | False | Public |
| Totaliseringsmonitor voor configuratie van gateway (Lightweight) | Microsoft.AdvancedThreatAnalytics.1_8.Container.Gateway.LightWeight.Configuration.RollupMonitor | Microsoft.AdvancedThreatAnalytics.1_8.Container.Gateway | WorstOf | System.Health.ConfigurationState | Microsoft.AdvancedThreatAnalytics.1_8.Container.Gateway.contains.Microsoft.AdvancedThreatAnalytics.1_8.Gateway.LightWeight | ConfigurationHealth | True | False | Public |
| Totaliseringsmonitor voor prestaties van gateway (Lightweight) | Microsoft.AdvancedThreatAnalytics.1_8.Container.Gateway.LightWeight.Performance.RollupMonitor | Microsoft.AdvancedThreatAnalytics.1_8.Container.Gateway | WorstOf | System.Health.PerformanceState | Microsoft.AdvancedThreatAnalytics.1_8.Container.Gateway.contains.Microsoft.AdvancedThreatAnalytics.1_8.Gateway.LightWeight | PerformanceHealth | True | False | Public |
| Totaliseringsmonitor voor beveiliging van gateway (Lightweight) | Microsoft.AdvancedThreatAnalytics.1_8.Container.Gateway.LightWeight.Security.RollupMonitor | Microsoft.AdvancedThreatAnalytics.1_8.Container.Gateway | WorstOf | System.Health.SecurityState | Microsoft.AdvancedThreatAnalytics.1_8.Container.Gateway.contains.Microsoft.AdvancedThreatAnalytics.1_8.Gateway.LightWeight | SecurityHealth | True | False | Public |
| Totaliseringsmonitor voor beschikbaarheid van gateway (zelfstandig) | Microsoft.AdvancedThreatAnalytics.1_8.Container.Gateway.Standalone.Availability.RollupMonitor | Microsoft.AdvancedThreatAnalytics.1_8.Container.Gateway | WorstOf | System.Health.AvailabilityState | Microsoft.AdvancedThreatAnalytics.1_8.Container.Gateway.contains.Microsoft.AdvancedThreatAnalytics.1_8.Gateway.Standalone | AvailabilityHealth | True | False | Public |
| Totaliseringsmonitor voor configuratie van gateway (zelfstandig) | Microsoft.AdvancedThreatAnalytics.1_8.Container.Gateway.Standalone.Configuration.RollupMonitor | Microsoft.AdvancedThreatAnalytics.1_8.Container.Gateway | WorstOf | System.Health.ConfigurationState | Microsoft.AdvancedThreatAnalytics.1_8.Container.Gateway.contains.Microsoft.AdvancedThreatAnalytics.1_8.Gateway.Standalone | ConfigurationHealth | True | False | Public |
| Totaliseringsmonitor voor prestaties van gateway (zelfstandig) | Microsoft.AdvancedThreatAnalytics.1_8.Container.Gateway.Standalone.Performance.RollupMonitor | Microsoft.AdvancedThreatAnalytics.1_8.Container.Gateway | WorstOf | System.Health.PerformanceState | Microsoft.AdvancedThreatAnalytics.1_8.Container.Gateway.contains.Microsoft.AdvancedThreatAnalytics.1_8.Gateway.Standalone | PerformanceHealth | True | False | Public |
| Totaliseringsmonitor voor beveiliging van gateway (zelfstandig) | Microsoft.AdvancedThreatAnalytics.1_8.Container.Gateway.Standalone.Security.RollupMonitor | Microsoft.AdvancedThreatAnalytics.1_8.Container.Gateway | WorstOf | System.Health.SecurityState | Microsoft.AdvancedThreatAnalytics.1_8.Container.Gateway.contains.Microsoft.AdvancedThreatAnalytics.1_8.Gateway.Standalone | SecurityHealth | True | False | Public |
| Totaliseringsmonitor beschikbaarheid van service (Center) | Microsoft.AdvancedThreatAnalytics.1_8.Service.Center.Availability.RollupMonitor | Microsoft.AdvancedThreatAnalytics.1_8.Service | WorstOf | System.Health.AvailabilityState | Microsoft.AdvancedThreatAnalytics.1_8.Service.contains.Microsoft.AdvancedThreatAnalytics.1_8.Center | AvailabilityHealth | True | False | Public |
| Totaliseringsmonitor configuratie van service (Center) | Microsoft.AdvancedThreatAnalytics.1_8.Service.Center.Configuration.RollupMonitor | Microsoft.AdvancedThreatAnalytics.1_8.Service | WorstOf | System.Health.ConfigurationState | Microsoft.AdvancedThreatAnalytics.1_8.Service.contains.Microsoft.AdvancedThreatAnalytics.1_8.Center | ConfigurationHealth | True | False | Public |
| Totaliseringsmonitor prestaties van service (Center) | Microsoft.AdvancedThreatAnalytics.1_8.Service.Center.Performance.RollupMonitor | Microsoft.AdvancedThreatAnalytics.1_8.Service | WorstOf | System.Health.PerformanceState | Microsoft.AdvancedThreatAnalytics.1_8.Service.contains.Microsoft.AdvancedThreatAnalytics.1_8.Center | PerformanceHealth | True | False | Public |
| Totaliseringsmonitor beveiliging van service (Center) | Microsoft.AdvancedThreatAnalytics.1_8.Service.Center.Security.RollupMonitor | Microsoft.AdvancedThreatAnalytics.1_8.Service | WorstOf | System.Health.SecurityState | Microsoft.AdvancedThreatAnalytics.1_8.Service.contains.Microsoft.AdvancedThreatAnalytics.1_8.Center | SecurityHealth | True | False | Public |
| Totaliseringsmonitor beschikbaarheid van service (gateway) | Microsoft.AdvancedThreatAnalytics.1_8.Service.Gateway.Availability.RollupMonitor | Microsoft.AdvancedThreatAnalytics.1_8.Service | WorstOf | System.Health.AvailabilityState | Microsoft.AdvancedThreatAnalytics.1_8.Service.contains.Microsoft.AdvancedThreatAnalytics.1_8.Container.Gateway | AvailabilityHealth | True | False | Public |
| Totaliseringsmonitor configuratie van service (gateway) | Microsoft.AdvancedThreatAnalytics.1_8.Service.Gateway.Configuration.RollupMonitor | Microsoft.AdvancedThreatAnalytics.1_8.Service | WorstOf | System.Health.ConfigurationState | Microsoft.AdvancedThreatAnalytics.1_8.Service.contains.Microsoft.AdvancedThreatAnalytics.1_8.Container.Gateway | ConfigurationHealth | True | False | Public |
| Totaliseringsmonitor prestaties van service (gateway) | Microsoft.AdvancedThreatAnalytics.1_8.Service.Gateway.Performance.RollupMonitor | Microsoft.AdvancedThreatAnalytics.1_8.Service | WorstOf | System.Health.PerformanceState | Microsoft.AdvancedThreatAnalytics.1_8.Service.contains.Microsoft.AdvancedThreatAnalytics.1_8.Container.Gateway | PerformanceHealth | True | False | Public |
| Totaliseringsmonitor beveiliging van service (gateway) | Microsoft.AdvancedThreatAnalytics.1_8.Service.Gateway.Security.RollupMonitor | Microsoft.AdvancedThreatAnalytics.1_8.Service | WorstOf | System.Health.SecurityState | Microsoft.AdvancedThreatAnalytics.1_8.Service.contains.Microsoft.AdvancedThreatAnalytics.1_8.Container.Gateway | SecurityHealth | True | False | Public |
| Totaliseringsmonitor root-beschikbaarheid | Microsoft.AdvancedThreatAnalytics.Container.Availability.RollupMonitor | Microsoft.AdvancedThreatAnalytics.Container | WorstOf | System.Health.AvailabilityState | Microsoft.AdvancedThreatAnalytics.Container.contains.Microsoft.AdvancedThreatAnalytics.1_8.Service | AvailabilityHealth | True | False | Public |
| Totaliseringsmonitor root-configuratie | Microsoft.AdvancedThreatAnalytics.Container.Configuration.RollupMonitor | Microsoft.AdvancedThreatAnalytics.Container | WorstOf | System.Health.ConfigurationState | Microsoft.AdvancedThreatAnalytics.Container.contains.Microsoft.AdvancedThreatAnalytics.1_8.Service | ConfigurationHealth | True | False | Public |
| Totaliseringsmonitor root-prestaties | Microsoft.AdvancedThreatAnalytics.Container.Performance.RollupMonitor | Microsoft.AdvancedThreatAnalytics.Container | WorstOf | System.Health.PerformanceState | Microsoft.AdvancedThreatAnalytics.Container.contains.Microsoft.AdvancedThreatAnalytics.1_8.Service | PerformanceHealth | True | False | Public |
| Totaliseringsmonitor root-beveiliging | Microsoft.AdvancedThreatAnalytics.Container.Security.RollupMonitor | Microsoft.AdvancedThreatAnalytics.Container | WorstOf | System.Health.SecurityState | Microsoft.AdvancedThreatAnalytics.Container.contains.Microsoft.AdvancedThreatAnalytics.1_8.Service | SecurityHealth | True | False | Public |
| DisplayName | ID | Target | Category | Enabled | Alert Generate | Accessibility | |
|---|---|---|---|---|---|---|---|
 | ATA Center: Servicemonitor | Microsoft.AdvancedThreatAnalytics.1_8.Center.ATACenter | Microsoft.AdvancedThreatAnalytics.1_8.Center | AvailabilityHealth | True | True | Public |
| Grootte van AtSVC-blok van database | Microsoft.AdvancedThreatAnalytics.1_8.Center.DatabaseAtSvcBlockSize.PerformanceHealth | Microsoft.AdvancedThreatAnalytics.1_8.Center | PerformanceHealth | True | True | Public |
| Grootte van DirectoryServicesActivity-blok van database< | Microsoft.AdvancedThreatAnalytics.1_8.Center.DatabaseDirectoryServicesActivityBlockSize.PerformanceHealth | Microsoft.AdvancedThreatAnalytics.1_8.Center | PerformanceHealth | True | True | Public |
| Grootte van DNS-blok van database | Microsoft.AdvancedThreatAnalytics.1_8.Center.DatabaseDnsBlockSize.PerformanceHealth | Microsoft.AdvancedThreatAnalytics.1_8.Center | PerformanceHealth | True | True | Public |
| Grootte van DRSR-blok van database | Microsoft.AdvancedThreatAnalytics.1_8.Center.DatabaseDrsrBlockSize.PerformanceHealth | Microsoft.AdvancedThreatAnalytics.1_8.Center | PerformanceHealth | True | True | Public |
| Grootte van GroupMembershipChangeEvent-blok van database | Microsoft.AdvancedThreatAnalytics.1_8.Center.DatabaseGroupMembershipChangeEventBlockSize.PerformanceHealth | Microsoft.AdvancedThreatAnalytics.1_8.Center | PerformanceHealth | True | True | Public |
| Grootte van KerberosAP-blok van database | Microsoft.AdvancedThreatAnalytics.1_8.Center.DatabaseKerberosApBlockSize.PerformanceHealth | Microsoft.AdvancedThreatAnalytics.1_8.Center | PerformanceHealth | True | True | Public |
| Grootte van KerberosAS-blok van database | Microsoft.AdvancedThreatAnalytics.1_8.Center.DatabaseKerberosAsBlockSize.PerformanceHealth | Microsoft.AdvancedThreatAnalytics.1_8.Center | PerformanceHealth | True | True | Public |
| Grootte van KerberosTGS-blok van database | Microsoft.AdvancedThreatAnalytics.1_8.Center.DatabaseKerberosTgsBlockSize.PerformanceHealth | Microsoft.AdvancedThreatAnalytics.1_8.Center | PerformanceHealth | True | True | Public |
| Grootte van LDAP-blok van database | Microsoft.AdvancedThreatAnalytics.1_8.Center.DatabaseLdapBlockSize.PerformanceHealth | Microsoft.AdvancedThreatAnalytics.1_8.Center | PerformanceHealth | True | True | Public |
| LogonEvent-blokgrootte van de database | Microsoft.AdvancedThreatAnalytics.1_8.Center.DatabaseLogonEventBlockSize.PerformanceHealth | Microsoft.AdvancedThreatAnalytics.1_8.Center | PerformanceHealth | True | True | Public |
| Grootte van LsaRPC-blok van database | Microsoft.AdvancedThreatAnalytics.1_8.Center.DatabaseLsaRpcBlockSize.PerformanceHealth | Microsoft.AdvancedThreatAnalytics.1_8.Center | PerformanceHealth | True | True | Public |
| Grootte van Netlogon-blok van database | Microsoft.AdvancedThreatAnalytics.1_8.Center.DatabaseNetlogonBlockSize.PerformanceHealth | Microsoft.AdvancedThreatAnalytics.1_8.Center | PerformanceHealth | True | True | Public |
| Grootte van NTLM-blok van database | Microsoft.AdvancedThreatAnalytics.1_8.Center.DatabaseNtlmBlockSize.PerformanceHealth | Microsoft.AdvancedThreatAnalytics.1_8.Center | PerformanceHealth | True | True | Public |
| Grootte van NTLMEvent-blok van database | Microsoft.AdvancedThreatAnalytics.1_8.Center.DatabaseNtlmEventBlockSize.PerformanceHealth | Microsoft.AdvancedThreatAnalytics.1_8.Center | PerformanceHealth | True | True | Public |
| Grootte van SAMR-blok van database | Microsoft.AdvancedThreatAnalytics.1_8.Center.DatabaseSamrBlockSize.PerformanceHealth | Microsoft.AdvancedThreatAnalytics.1_8.Center | PerformanceHealth | True | True | Public |
| Grootte van ServiceControl-blok van database | Microsoft.AdvancedThreatAnalytics.1_8.Center.DatabaseServiceControlBlockSize.PerformanceHealth | Microsoft.AdvancedThreatAnalytics.1_8.Center | PerformanceHealth | True | True | Public |
| Grootte van SMB-blok van database | Microsoft.AdvancedThreatAnalytics.1_8.Center.DatabaseSmbBlockSize.PerformanceHealth | Microsoft.AdvancedThreatAnalytics.1_8.Center | PerformanceHealth | True | True | Public |
| Grootte van SrvSVC-blok van database | Microsoft.AdvancedThreatAnalytics.1_8.Center.DatabaseSrvSvcBlockSize.PerformanceHealth | Microsoft.AdvancedThreatAnalytics.1_8.Center | PerformanceHealth | True | True | Public |
| Grootte van TaskScheduler-blok van database | Microsoft.AdvancedThreatAnalytics.1_8.Center.DatabaseTaskSchedulerBlockSize.PerformanceHealth | Microsoft.AdvancedThreatAnalytics.1_8.Center | PerformanceHealth | True | True | Public |
| Grootte van VpnAuthenticationEvent-blok van database | Microsoft.AdvancedThreatAnalytics.1_8.Center.DatabaseVpnAuthenticationEventBlockSize.PerformanceHealth | Microsoft.AdvancedThreatAnalytics.1_8.Center | PerformanceHealth | True | True | Public |
| Wmi-blokgrootte van database | Microsoft.AdvancedThreatAnalytics.1_8.Center.DatabaseWmiBlockSize.PerformanceHealth | Microsoft.AdvancedThreatAnalytics.1_8.Center | PerformanceHealth | True | True | Public |
| Blokgrootte EntityProfiler-netwerkactiviteit | Microsoft.AdvancedThreatAnalytics.1_8.Center.EntityProfilerNetworkActivityBlockSize.PerformanceHealth | Microsoft.AdvancedThreatAnalytics.1_8.Center | PerformanceHealth | True | True | Public |
| Blokgrootte EntityReceiver-entiteitsbatch | Microsoft.AdvancedThreatAnalytics.1_8.Center.EntityReceiverEntityBatchBlockSize.PerformanceHealth | Microsoft.AdvancedThreatAnalytics.1_8.Center | PerformanceHealth | True | True | Public |
| Blokgrootte NetworkActivityProcessor-netwerkactiviteit | Microsoft.AdvancedThreatAnalytics.1_8.Center.NetworkActivityProcessorNetworkActivityBlockSize.PerformanceHealth | Microsoft.AdvancedThreatAnalytics.1_8.Center | PerformanceHealth | True | True | Public |
| MongoDB-servicemonitor | Microsoft.AdvancedThreatAnalytics.1_8.Database.MongoDB | Microsoft.AdvancedThreatAnalytics.1_8.Database | AvailabilityHealth | True | True | Public |
| ATA-gateway: Servicemonitor | Microsoft.AdvancedThreatAnalytics.1_8.Gateway.ATAGateway | Microsoft.AdvancedThreatAnalytics.1_8.Gateway | AvailabilityHealth | True | True | Public |
| Updater-servicemonitor van de ATA-gateway | Microsoft.AdvancedThreatAnalytics.1_8.Gateway.ATAGatewayUpdater | Microsoft.AdvancedThreatAnalytics.1_8.Gateway | AvailabilityHealth | True | True | Public |
| Blokgrootte EntityResolver-activiteit | Microsoft.AdvancedThreatAnalytics.1_8.Gateway.EntityResolverActivityBlockSize.PerformanceHealth | Microsoft.AdvancedThreatAnalytics.1_8.Gateway | PerformanceHealth | True | True | Public |
| Blokgrootte EntitySender-entiteitsbatch | Microsoft.AdvancedThreatAnalytics.1_8.Gateway.EntitySenderEntityBatchBlockSize.PerformanceHealth | Microsoft.AdvancedThreatAnalytics.1_8.Gateway | PerformanceHealth | True | True | Public |
| Verzendtijd EntitySender-entiteitsbatch | Microsoft.AdvancedThreatAnalytics.1_8.Gateway.EntitySenderEntityBatchSendTime.PerformanceHealth | Microsoft.AdvancedThreatAnalytics.1_8.Gateway | PerformanceHealth | True | True | Public |
| NetworkActivityTranslator-berichtgegevens - blokgrootte 0 | Microsoft.AdvancedThreatAnalytics.1_8.Gateway.NetworkActivityTranslatorMessageData0BlockSize.PerformanceHealth | Microsoft.AdvancedThreatAnalytics.1_8.Gateway | PerformanceHealth | True | True | Public |
| NetworkListener ETW - weggevallen gebeurtenissen per seconde | Microsoft.AdvancedThreatAnalytics.1_8.Gateway.NetworkListenerETWDroppedEventsSec.PerformanceHealth | Microsoft.AdvancedThreatAnalytics.1_8.Gateway | PerformanceHealth | True | True | Public |
| NetworkListener PEF - weggevallen gebeurtenissen per seconde | Microsoft.AdvancedThreatAnalytics.1_8.Gateway.NetworkListenerPEFDroppedEventsSec.PerformanceHealth | Microsoft.AdvancedThreatAnalytics.1_8.Gateway | PerformanceHealth | True | True | Public |
| DisplayName | ID | Target | Category | Enabled | Alert Generate | |
|---|---|---|---|---|---|---|
 | Waarschuwingsregel voor verdachte activiteit door abnormaal gedrag | Microsoft.AdvancedThreatAnalytics.1_8.Center.AbnormalBehaviorSuspiciousActivity | Microsoft.AdvancedThreatAnalytics.1_8.Center | SecurityHealth | False | True |
| Regel voor waarschuwing bij verdachte activiteit door abnormaal protocol | Microsoft.AdvancedThreatAnalytics.1_8.Center.AbnormalProtocolSuspiciousActivity | Microsoft.AdvancedThreatAnalytics.1_8.Center | SecurityHealth | False | True |
| Regel voor waarschuwing bij verdachte activiteit met betrekking tot abnormale wijziging van het lidmaatschap van een vertrouwelijke groep | Microsoft.AdvancedThreatAnalytics.1_8.Center.AbnormalSensitiveGroupMembershipChangeSuspiciousActivity | Microsoft.AdvancedThreatAnalytics.1_8.Center | SecurityHealth | False | True |
| Regel voor waarschuwing bij verdachte activiteit door abnormaal VPN | Microsoft.AdvancedThreatAnalytics.1_8.Center.AbnormalVpnSuspiciousActivity | Microsoft.AdvancedThreatAnalytics.1_8.Center | SecurityHealth | False | True |
| Waarschuwingsregel voor verdachte activiteit door accountopsomming | Microsoft.AdvancedThreatAnalytics.1_8.Center.AccountEnumerationSuspiciousActivity | Microsoft.AdvancedThreatAnalytics.1_8.Center | SecurityHealth | False | True |
| Waarschuwingsregel voor verdachte activiteit van beveiligingsaanval | Microsoft.AdvancedThreatAnalytics.1_8.Center.BruteForceSuspiciousActivity | Microsoft.AdvancedThreatAnalytics.1_8.Center | SecurityHealth | False | True |
| Waarschuwingsregel voor waarschuwing bij controle van vrije ruimte op het gegevensstation van de database van ATA 1.8 Center | Microsoft.AdvancedThreatAnalytics.1_8.Center.CenterDatabaseDataDriveFreeSpaceMonitoringAlert | Microsoft.AdvancedThreatAnalytics.1_8.Center | AvailabilityHealth | True | True |
| Waarschuwingsregel voor waarschuwing bij controle van niet-verbonden database van ATA 1.8 Center | Microsoft.AdvancedThreatAnalytics.1_8.Center.CenterDatabaseDisconnectedMonitoringAlert | Microsoft.AdvancedThreatAnalytics.1_8.Center | AvailabilityHealth | True | True |
| Waarschuwingsregel voor waarschuwing bij controle van omzettingsfout bij extern IP-adres van ATA 1.8 Center | Microsoft.AdvancedThreatAnalytics.1_8.Center.CenterExternalIpAddressResolutionFailureMonitoringAlert | Microsoft.AdvancedThreatAnalytics.1_8.Center | AvailabilityHealth | True | True |
| Waarschuwingsregel voor waarschuwing bij controle van e-mail van ATA 1.8 Center | Microsoft.AdvancedThreatAnalytics.1_8.Center.CenterMailMonitoringAlert | Microsoft.AdvancedThreatAnalytics.1_8.Center | ConfigurationHealth | True | True |
| Waarschuwingsregel voor waarschuwing bij controle van niet-ontvangen verkeer van ATA 1.8 Center | Microsoft.AdvancedThreatAnalytics.1_8.Center.CenterNotReceivingTrafficMonitoringAlert | Microsoft.AdvancedThreatAnalytics.1_8.Center | AvailabilityHealth | True | True |
| Waarschuwingsregel voor waarschuwing bij controle van overbelasting van ATA 1.8 Center | Microsoft.AdvancedThreatAnalytics.1_8.Center.CenterOverloadedMonitoringAlert | Microsoft.AdvancedThreatAnalytics.1_8.Center | PerformanceHealth | True | True |
| Waarschuwingsregel voor waarschuwing bij controle van syslog van ATA 1.8 Center | Microsoft.AdvancedThreatAnalytics.1_8.Center.CenterSyslogMonitoringAlert | Microsoft.AdvancedThreatAnalytics.1_8.Center | ConfigurationHealth | True | True |
| Waarschuwingsregel voor waarschuwing bij controle van verlopen certificaat van ATA 1.8 Center | Microsoft.AdvancedThreatAnalytics.1_8.Center.CertificateExpiryMonitoringAlert | Microsoft.AdvancedThreatAnalytics.1_8.Center | ConfigurationHealth | True | True |
| Waarschuwingsregel van de computer voor verdachte activiteit bij mislukte voorafgaande verificatie | Microsoft.AdvancedThreatAnalytics.1_8.Center.ComputerPreauthenticationFailedSuspiciousActivity | Microsoft.AdvancedThreatAnalytics.1_8.Center | SecurityHealth | False | True |
| Grootte van AtSVC-blok van database | Microsoft.AdvancedThreatAnalytics.1_8.Center.DatabaseAtSvcBlockSize | Microsoft.AdvancedThreatAnalytics.1_8.Center | PerformanceCollection | True | False |
| Grootte van DirectoryServicesActivity-blok van database | Microsoft.AdvancedThreatAnalytics.1_8.Center.DatabaseDirectoryServicesActivityBlockSize | Microsoft.AdvancedThreatAnalytics.1_8.Center | PerformanceCollection | True | False |
| Grootte van DNS-blok van database | Microsoft.AdvancedThreatAnalytics.1_8.Center.DatabaseDnsBlockSize | Microsoft.AdvancedThreatAnalytics.1_8.Center | PerformanceCollection | True | False |
| Grootte van DRSR-blok van database | Microsoft.AdvancedThreatAnalytics.1_8.Center.DatabaseDrsrBlockSize | Microsoft.AdvancedThreatAnalytics.1_8.Center | PerformanceCollection | True | False |
| Grootte van KerberosAP-blok van database | Microsoft.AdvancedThreatAnalytics.1_8.Center.DatabaseKerberosApBlockSize | Microsoft.AdvancedThreatAnalytics.1_8.Center | PerformanceCollection | True | False |
| Grootte van KerberosAS-blok van database | Microsoft.AdvancedThreatAnalytics.1_8.Center.DatabaseKerberosAsBlockSize | Microsoft.AdvancedThreatAnalytics.1_8.Center | PerformanceCollection | True | False |
| Grootte van KerberosTGS-blok van database | Microsoft.AdvancedThreatAnalytics.1_8.Center.DatabaseKerberosTgsBlockSize | Microsoft.AdvancedThreatAnalytics.1_8.Center | PerformanceCollection | True | False |
| Grootte van LDAP-blok van database | Microsoft.AdvancedThreatAnalytics.1_8.Center.DatabaseLdapBlockSize | Microsoft.AdvancedThreatAnalytics.1_8.Center | PerformanceCollection | True | False |
| Grootte van LsaRPC-blok van database | Microsoft.AdvancedThreatAnalytics.1_8.Center.DatabaseLsaRpcBlockSize | Microsoft.AdvancedThreatAnalytics.1_8.Center | PerformanceCollection | True | False |
| Grootte van Netlogon-blok van database | Microsoft.AdvancedThreatAnalytics.1_8.Center.DatabaseNetlogonBlockSize | Microsoft.AdvancedThreatAnalytics.1_8.Center | PerformanceCollection | True | False |
| Grootte van NTLM-blok van database | Microsoft.AdvancedThreatAnalytics.1_8.Center.DatabaseNtlmBlockSize | Microsoft.AdvancedThreatAnalytics.1_8.Center | PerformanceCollection | True | False |
| Grootte van NTLMEvent-blok van database | Microsoft.AdvancedThreatAnalytics.1_8.Center.DatabaseNtlmEventBlockSize | Microsoft.AdvancedThreatAnalytics.1_8.Center | PerformanceCollection | True | False |
| Grootte van ServiceControl-blok van database | Microsoft.AdvancedThreatAnalytics.1_8.Center.DatabaseServiceControlBlockSize | Microsoft.AdvancedThreatAnalytics.1_8.Center | PerformanceCollection | True | False |
| Grootte van SMB-blok van database | Microsoft.AdvancedThreatAnalytics.1_8.Center.DatabaseSmbBlockSize | Microsoft.AdvancedThreatAnalytics.1_8.Center | PerformanceCollection | True | False |
| Grootte van SrvSVC-blok van database | Microsoft.AdvancedThreatAnalytics.1_8.Center.DatabaseSrvSvcBlockSize | Microsoft.AdvancedThreatAnalytics.1_8.Center | PerformanceCollection | True | False |
| Grootte van TaskScheduler-blok van database | Microsoft.AdvancedThreatAnalytics.1_8.Center.DatabaseTaskSchedulerBlockSize | Microsoft.AdvancedThreatAnalytics.1_8.Center | PerformanceCollection | True | False |
| Waarschuwingsregel voor verdachte activiteit tijdens Directory Services-replicatie | Microsoft.AdvancedThreatAnalytics.1_8.Center.DirectoryServicesReplicationSuspiciousActivity | Microsoft.AdvancedThreatAnalytics.1_8.Center | SecurityHealth | False | True |
| Waarschuwingsregel voor verdachte activiteit door DNS Reconnaissance | Microsoft.AdvancedThreatAnalytics.1_8.Center.DnsReconnaissanceSuspiciousActivity | Microsoft.AdvancedThreatAnalytics.1_8.Center | SecurityHealth | False | True |
| Waarschuwingsregel voor verdachte activiteit door downgrade van versleuteling | Microsoft.AdvancedThreatAnalytics.1_8.Center.EncryptionDowngradeSuspiciousActivity | Microsoft.AdvancedThreatAnalytics.1_8.Center | SecurityHealth | False | True |
| Blokgrootte EntityProfiler-netwerkactiviteit | Microsoft.AdvancedThreatAnalytics.1_8.Center.EntityProfilerNetworkActivityBlockSize | Microsoft.AdvancedThreatAnalytics.1_8.Center | PerformanceCollection | True | False |
| Blokgrootte EntityReceiver-entiteitsbatch | Microsoft.AdvancedThreatAnalytics.1_8.Center.EntityReceiverEntityBatchBlockSize | Microsoft.AdvancedThreatAnalytics.1_8.Center | PerformanceCollection | True | False |
| Waarschuwingsregel voor verdachte activiteit (Golden Ticket) door downgrade van versleuteling | Microsoft.AdvancedThreatAnalytics.1_8.Center.EnumerateSessionsSuspiciousActivity | Microsoft.AdvancedThreatAnalytics.1_8.Center | SecurityHealth | False | True |
| Waarschuwingsregel voor verdachte activiteit (Overpass the Hash) door downgrade van versleuteling | Microsoft.AdvancedThreatAnalytics.1_8.Center.ForgedPacSuspiciousActivity | Microsoft.AdvancedThreatAnalytics.1_8.Center | SecurityHealth | False | True |
| Waarschuwingsregel voor waarschuwing bij controle van foutieve netwerkadapter bij gatewayregistratie van ATA 1.8 | Microsoft.AdvancedThreatAnalytics.1_8.Center.GatewayCaptureNetworkAdapterFaultedMonitoringAlert | Microsoft.AdvancedThreatAnalytics.1_8.Center | AvailabilityHealth | True | True |
| Waarschuwingsregel voor waarschuwing bij controle van ontbrekende netwerkadapter bij gatewayregistratie van ATA 1.8 | Microsoft.AdvancedThreatAnalytics.1_8.Center.GatewayCaptureNetworkAdapterMissingMonitoringAlert | Microsoft.AdvancedThreatAnalytics.1_8.Center | ConfigurationHealth | True | True |
| Waarschuwingsregel voor waarschuwing bij controle van verlopen Directory Services-clientaccountwachtwoord van de ATA 1.8-gateway | Microsoft.AdvancedThreatAnalytics.1_8.Center.GatewayDirectoryServicesClientAccountPasswordExpiryMonitoringAlert | Microsoft.AdvancedThreatAnalytics.1_8.Center | ConfigurationHealth | True | True |
| Waarschuwingsregel voor waarschuwing bij Directory Services-clientconnectiviteit van de ATA 1.8-gateway | Microsoft.AdvancedThreatAnalytics.1_8.Center.GatewayDirectoryServicesClientConnectivityMonitoringAlert | Microsoft.AdvancedThreatAnalytics.1_8.Center | AvailabilityHealth | True | True |
| Waarschuwingsregel voor waarschuwing bij controle van niet-verbonden gateway van ATA 1.8 | Microsoft.AdvancedThreatAnalytics.1_8.Center.GatewayDisconnectedMonitoringAlert | Microsoft.AdvancedThreatAnalytics.1_8.Center | AvailabilityHealth | True | True |
| Waarschuwingsregel voor waarschuwing bij controle van niet-toegewezen gatewaydomeinsynchronisatieroutine van ATA 1.8 | Microsoft.AdvancedThreatAnalytics.1_8.Center.GatewayDomainSynchronizerNotAssignedMonitoringAlert | Microsoft.AdvancedThreatAnalytics.1_8.Center | ConfigurationHealth | True | True |
| Waarschuwingsregel voor waarschuwing bij controle van weinig geheugen van de gateway van ATA 1.8 | Microsoft.AdvancedThreatAnalytics.1_8.Center.GatewayLowMemoryMonitoringAlert | Microsoft.AdvancedThreatAnalytics.1_8.Center | PerformanceHealth | True | True |
| Waarschuwingsregel voor waarschuwing bij controle van overbelaste gebeurtenisactiviteiten van de gateway van ATA 1.8 | Microsoft.AdvancedThreatAnalytics.1_8.Center.GatewayOverloadedEventActivitiesMonitoringAlert | Microsoft.AdvancedThreatAnalytics.1_8.Center | PerformanceHealth | True | True |
| Waarschuwingsregel voor waarschuwing bij controle van overbelaste netwerkactiviteiten van de gateway van ATA 1.8 | Microsoft.AdvancedThreatAnalytics.1_8.Center.GatewayOverloadedNetworkActivitiesMonitoringAlert | Microsoft.AdvancedThreatAnalytics.1_8.Center | PerformanceHealth | True | True |
| Waarschuwingsregel voor waarschuwing bij controle van de RADIUS-gebeurtenislistener van de gateway van ATA 1.8 | Microsoft.AdvancedThreatAnalytics.1_8.Center.GatewayRadiusEventListenerMonitoringAlert | Microsoft.AdvancedThreatAnalytics.1_8.Center | AvailabilityHealth | True | True |
| Waarschuwingsregel voor waarschuwing bij controle op verouderde gateways van ATA 1.8 | Microsoft.AdvancedThreatAnalytics.1_8.Center.GatewaysOutdatedMonitoringAlert | Microsoft.AdvancedThreatAnalytics.1_8.Center | ConfigurationHealth | True | True |
| Waarschuwingsregel voor waarschuwing bij controle op startfout van de gateway van ATA 1.8 | Microsoft.AdvancedThreatAnalytics.1_8.Center.GatewayStartFailureMonitoringAlert | Microsoft.AdvancedThreatAnalytics.1_8.Center | AvailabilityHealth | True | True |
| Waarschuwingsregel voor waarschuwing bij controle van de syslog-gebeurtenislistener van de gateway van ATA 1.8 | Microsoft.AdvancedThreatAnalytics.1_8.Center.GatewaySyslogEventListenerMonitoringAlert | Microsoft.AdvancedThreatAnalytics.1_8.Center | AvailabilityHealth | True | True |
| Waarschuwingsregel voor verdachte activiteit (Skeleton Key) door downgrade van versleuteling | Microsoft.AdvancedThreatAnalytics.1_8.Center.GoldenTicketSuspiciousActivity | Microsoft.AdvancedThreatAnalytics.1_8.Center | SecurityHealth | False | True |
| Waarschuwingsregel voor verdachte activiteit door opsomming van sessies | Microsoft.AdvancedThreatAnalytics.1_8.Center.HoneytokenActivitySuspiciousActivity | Microsoft.AdvancedThreatAnalytics.1_8.Center | SecurityHealth | False | True |
| Waarschuwingsregel voor verdachte activiteit door vervalste PAC | Microsoft.AdvancedThreatAnalytics.1_8.Center.LdapBruteForceSuspiciousActivity | Microsoft.AdvancedThreatAnalytics.1_8.Center | SecurityHealth | False | True |
| Waarschuwingsregel voor verdachte activiteit door Honeytoken-activiteit | Microsoft.AdvancedThreatAnalytics.1_8.Center.LdapCleartextPasswordSuspiciousActivity | Microsoft.AdvancedThreatAnalytics.1_8.Center | SecurityHealth | False | True |
| Waarschuwingsregel voor verdachte activiteit door ongecodeerd wachtwoord tijdens een 'simple bind' (eenvoudige binding) voor LDAP | Microsoft.AdvancedThreatAnalytics.1_8.Center.MassiveObjectDeletionSuspiciousActivity | Microsoft.AdvancedThreatAnalytics.1_8.Center | SecurityHealth | False | True |
| Blokgrootte NetworkActivityProcessor-netwerkactiviteit | Microsoft.AdvancedThreatAnalytics.1_8.Center.NetworkActivityProcessorNetworkActivityBlockSize | Microsoft.AdvancedThreatAnalytics.1_8.Center | PerformanceCollection | True | False |
| Waarschuwingsregel voor verdachte activiteit door massale objectverwijdering | Microsoft.AdvancedThreatAnalytics.1_8.Center.PassTheHashSuspiciousActivity | Microsoft.AdvancedThreatAnalytics.1_8.Center | SecurityHealth | False | True |
| Waarschuwingsregel voor verdachte activiteit Pass The Hash | Microsoft.AdvancedThreatAnalytics.1_8.Center.PassTheTicketSuspiciousActivity | Microsoft.AdvancedThreatAnalytics.1_8.Center | SecurityHealth | False | True |
| Waarschuwingsregel voor verdachte activiteit Pass The Ticket | Microsoft.AdvancedThreatAnalytics.1_8.Center.RemoteExecutionSuspiciousActivity | Microsoft.AdvancedThreatAnalytics.1_8.Center | SecurityHealth | False | True |
| Waarschuwingsregel voor verdachte activiteit door uitvoering op afstand | Microsoft.AdvancedThreatAnalytics.1_8.Center.RetrieveDataProtectionBackupKeySuspiciousActivity | Microsoft.AdvancedThreatAnalytics.1_8.Center | SecurityHealth | False | True |
| Waarschuwingsregel voor verdachte activiteit door ophalen back-upsleutel van Data Protection | Microsoft.AdvancedThreatAnalytics.1_8.Center.SamrReconnaissanceSuspiciousActivity | Microsoft.AdvancedThreatAnalytics.1_8.Center | SecurityHealth | False | True |
| Verificatie van de ATA-gateway door de domeincontroller is mislukt | Microsoft.AdvancedThreatAnalytics.1_8.Gateway.ActiveDirectoryAuthenticationFailure | Microsoft.AdvancedThreatAnalytics.1_8.Gateway | AvailabilityHealth | True | True |
| Tellers zijn mogelijk uitgeschakeld in het register | Microsoft.AdvancedThreatAnalytics.1_8.Gateway.CountersDisabled | Microsoft.AdvancedThreatAnalytics.1_8.Gateway | AvailabilityHealth | True | True |
| Blokgrootte EntityResolver-activiteit | Microsoft.AdvancedThreatAnalytics.1_8.Gateway.EntityResolverActivityBlockSize | Microsoft.AdvancedThreatAnalytics.1_8.Gateway | PerformanceCollection | True | False |
| Blokgrootte EntitySender-entiteitsbatch | Microsoft.AdvancedThreatAnalytics.1_8.Gateway.EntitySenderEntityBatchBlockSize | Microsoft.AdvancedThreatAnalytics.1_8.Gateway | PerformanceCollection | True | False |
| Verzendtijd EntitySender-entiteitsbatch | Microsoft.AdvancedThreatAnalytics.1_8.Gateway.EntitySenderEntityBatchSendTime | Microsoft.AdvancedThreatAnalytics.1_8.Gateway | PerformanceCollection | True | False |
| Verificatie van de ATA-gateway door het ATA Center is mislukt | Microsoft.AdvancedThreatAnalytics.1_8.Gateway.FailedToAuthenticateAgainstCenter | Microsoft.AdvancedThreatAnalytics.1_8.Gateway | AvailabilityHealth | True | True |
| De ATA-gateway kan geen verbinding maken met het ATA Center | Microsoft.AdvancedThreatAnalytics.1_8.Gateway.FailedToEstablishConnectionToCenter | Microsoft.AdvancedThreatAnalytics.1_8.Gateway | AvailabilityHealth | True | True |
| De ATA-gateway kan het SIEM Syslog-bericht niet parseren | Microsoft.AdvancedThreatAnalytics.1_8.Gateway.FailedToParseSyslog | Microsoft.AdvancedThreatAnalytics.1_8.Gateway | AvailabilityHealth | True | True |
| De ATA-gateway kan de domeincontroller niet bevragen via het LDAP-protocol | Microsoft.AdvancedThreatAnalytics.1_8.Gateway.FailedToQueryDCUsingLDAPProtocol | Microsoft.AdvancedThreatAnalytics.1_8.Gateway | AvailabilityHealth | True | True |
| De ATA-gateway kan de configuratie niet synchroniseren vanuit het ATA Center | Microsoft.AdvancedThreatAnalytics.1_8.Gateway.FailedToSynchronizeConfigurationFromCenter | Microsoft.AdvancedThreatAnalytics.1_8.Gateway | AvailabilityHealth | True | True |
| De ATA-gateway kan de certificaatketen van het ATA Center niet valideren | Microsoft.AdvancedThreatAnalytics.1_8.Gateway.FailedToValidateCenterCertificateChain | Microsoft.AdvancedThreatAnalytics.1_8.Gateway | AvailabilityHealth | True | True |
| De ATA-gateway heeft onvoldoende geheugen | Microsoft.AdvancedThreatAnalytics.1_8.Gateway.GatewayDoesNotHaveEnoughMemory | Microsoft.AdvancedThreatAnalytics.1_8.Gateway | AvailabilityHealth | True | True |
| Max. grootte toegewezen geheugen GatewayUpdaterResourceManager | Microsoft.AdvancedThreatAnalytics.1_8.Gateway.GatewayUpdaterResourceManagerCommitMemoryMaxSize | Microsoft.AdvancedThreatAnalytics.1_8.Gateway | PerformanceCollection | True | False |
| Max. percentage CPU-tijd GatewayUpdaterResourceManager | Microsoft.AdvancedThreatAnalytics.1_8.Gateway.GatewayUpdaterResourceManagerCPUTimeMax_ | Microsoft.AdvancedThreatAnalytics.1_8.Gateway | PerformanceCollection | True | False |
| Limiet werkset GatewayUpdaterResourceManager | Microsoft.AdvancedThreatAnalytics.1_8.Gateway.GatewayUpdaterResourceManagerWorkingSetLimitSize | Microsoft.AdvancedThreatAnalytics.1_8.Gateway | PerformanceCollection | True | False |
| Het HOSTS-bestand bevat een hostvermelding die verwijst naar de korte naam van de computer | Microsoft.AdvancedThreatAnalytics.1_8.Gateway.HostEntryInHOSTSFile | Microsoft.AdvancedThreatAnalytics.1_8.Gateway | AvailabilityHealth | True | True |
| Message Analyzer is geïnstalleerd op de ATA-gateway | Microsoft.AdvancedThreatAnalytics.1_8.Gateway.MessageAnalyzerIsInstalledOnGateway | Microsoft.AdvancedThreatAnalytics.1_8.Gateway | AvailabilityHealth | True | True |
| NetworkActivityTranslator-berichtgegevens - blokgrootte 0 | Microsoft.AdvancedThreatAnalytics.1_8.Gateway.NetworkActivityTranslatorMessageData0BlockSize | Microsoft.AdvancedThreatAnalytics.1_8.Gateway | PerformanceCollection | True | False |
| NetworkListener ETW - weggevallen gebeurtenissen per seconde | Microsoft.AdvancedThreatAnalytics.1_8.Gateway.NetworkListenerETWDroppedEvents_Sec | Microsoft.AdvancedThreatAnalytics.1_8.Gateway | PerformanceCollection | True | False |
| NetworkListener PEF - weggevallen gebeurtenissen per seconde | Microsoft.AdvancedThreatAnalytics.1_8.Gateway.NetworkListenerPEFDroppedEvents_Sec | Microsoft.AdvancedThreatAnalytics.1_8.Gateway | PerformanceCollection | True | False |
| NetworkListener PEF - geparseerde berichten per seconde | Microsoft.AdvancedThreatAnalytics.1_8.Gateway.NetworkListenerPEFParsedMessages_Sec | Microsoft.AdvancedThreatAnalytics.1_8.Gateway | PerformanceCollection | True | False |
| Er zijn andere installaties in behandeling op uw computer | Microsoft.AdvancedThreatAnalytics.1_8.Gateway.OtherPendingInstallations | Microsoft.AdvancedThreatAnalytics.1_8.Gateway | AvailabilityHealth | True | True |
| PEF (Message Analyzer) is niet juist geïnstalleerd | Microsoft.AdvancedThreatAnalytics.1_8.Gateway.PEFWasNotInstalledCorrectly | Microsoft.AdvancedThreatAnalytics.1_8.Gateway | AvailabilityHealth | True | True |
| PID's zijn ingeschakeld voor procesnamen in de ATA-gateway | Microsoft.AdvancedThreatAnalytics.1_8.Gateway.PIDsWasEnabledForProcessNamesInGateway | Microsoft.AdvancedThreatAnalytics.1_8.Gateway | AvailabilityHealth | True | True |
| Microsoft.AdvancedThreatAnalytics.1_8.Center.EncryptionDowngradeGoldenTicketSuspiciousActivity | Microsoft.AdvancedThreatAnalytics.1_8.Center.EncryptionDowngradeGoldenTicketSuspiciousActivity | Microsoft.AdvancedThreatAnalytics.1_8.Center | SecurityHealth | False | True |
| Microsoft.AdvancedThreatAnalytics.1_8.Center.EncryptionDowngradeOverPasstheHashSuspiciousActivity | Microsoft.AdvancedThreatAnalytics.1_8.Center.EncryptionDowngradeOverPasstheHashSuspiciousActivity | Microsoft.AdvancedThreatAnalytics.1_8.Center | SecurityHealth | False | True |
| Microsoft.AdvancedThreatAnalytics.1_8.Center.EncryptionDowngradeSkeletonKeySuspiciousActivity | Microsoft.AdvancedThreatAnalytics.1_8.Center.EncryptionDowngradeSkeletonKeySuspiciousActivity | Microsoft.AdvancedThreatAnalytics.1_8.Center | SecurityHealth | False | True |
| DisplayName | ID | Target | Accessibility | Category | Enabled | |
|---|---|---|---|---|---|---|
 | ATACenter-service opnieuw starten | Microsoft.AdvancedThreatAnalytics.1_8.Center.ATACenter.Restart | Microsoft.AdvancedThreatAnalytics.1_8.Center | Internal | Maintenance | True |
| ATACenter-service starten | Microsoft.AdvancedThreatAnalytics.1_8.Center.ATACenter.Start | Microsoft.AdvancedThreatAnalytics.1_8.Center | Internal | Maintenance | True |
| ATACenter-service stoppen | Microsoft.AdvancedThreatAnalytics.1_8.Center.ATACenter.Stop | Microsoft.AdvancedThreatAnalytics.1_8.Center | Internal | Maintenance | True |
| MongoDB-service opnieuw starten | Microsoft.AdvancedThreatAnalytics.1_8.Database.MongoDB.Restart | Microsoft.AdvancedThreatAnalytics.1_8.Database | Internal | Maintenance | True |
| MongoDB-service starten | Microsoft.AdvancedThreatAnalytics.1_8.Database.MongoDB.Start | Microsoft.AdvancedThreatAnalytics.1_8.Database | Internal | Maintenance | True |
| MongoDB-service stoppen | Microsoft.AdvancedThreatAnalytics.1_8.Database.MongoDB.Stop | Microsoft.AdvancedThreatAnalytics.1_8.Database | Internal | Maintenance | True |
| ATAGateway-service opnieuw starten | Microsoft.AdvancedThreatAnalytics.1_8.Gateway.ATAGateway.Restart | Microsoft.AdvancedThreatAnalytics.1_8.Gateway | Internal | Maintenance | True |
| ATAGateway-service starten | Microsoft.AdvancedThreatAnalytics.1_8.Gateway.ATAGateway.Start | Microsoft.AdvancedThreatAnalytics.1_8.Gateway | Internal | Maintenance | True |
| ATAGateway-service stoppen | Microsoft.AdvancedThreatAnalytics.1_8.Gateway.ATAGateway.Stop | Microsoft.AdvancedThreatAnalytics.1_8.Gateway | Internal | Maintenance | True |
| ATAGatewayUpdater-service opnieuw starten | Microsoft.AdvancedThreatAnalytics.1_8.Gateway.ATAGatewayUpdater.Restart | Microsoft.AdvancedThreatAnalytics.1_8.Gateway | Internal | Maintenance | True |
| ATAGatewayUpdater-service starten | Microsoft.AdvancedThreatAnalytics.1_8.Gateway.ATAGatewayUpdater.Start | Microsoft.AdvancedThreatAnalytics.1_8.Gateway | Internal | Maintenance | True |
| ATAGatewayUpdater-service stoppen | Microsoft.AdvancedThreatAnalytics.1_8.Gateway.ATAGatewayUpdater.Stop | Microsoft.AdvancedThreatAnalytics.1_8.Gateway | Internal | Maintenance | True |
| DisplayName | ID | Target | Accessibility | Enabled | |
|---|---|---|---|---|---|
 | ATA Center-consoletaak openen | Microsoft.AdvancedThreatAnalytics.1_8.Center.ATAConsole.Task | Microsoft.AdvancedThreatAnalytics.1_8.Center | Internal | True |
| ID | FolderName | ElementID | |
|---|---|---|---|
 | Microsoft.AdvancedThreatAnalytics.1_8.Center.SecurityAlerts.FolderItem | Microsoft.AdvancedThreatAnalytics.1_8.Folder.Root | Microsoft.AdvancedThreatAnalytics.1_8.Center.SecurityAlerts |
| Microsoft.AdvancedThreatAnalytics.1_8.HealthAlerts.FolderItem | Microsoft.AdvancedThreatAnalytics.1_8.Folder.Root | Microsoft.AdvancedThreatAnalytics.1_8.HealthAlerts |
| Microsoft.AdvancedThreatAnalytics.1_8.PerformanceAlerts.FolderItem | Microsoft.AdvancedThreatAnalytics.1_8.Folder.Root | Microsoft.AdvancedThreatAnalytics.1_8.PerformanceAlerts |
| Microsoft.AdvancedThreatAnalytics.1_8.StateGrid.FolderItem | Microsoft.AdvancedThreatAnalytics.1_8.Folder.Root | Microsoft.AdvancedThreatAnalytics.1_8.StateGrid |
| DisplayName | ID | ParentFolder | Accessibility | |
|---|---|---|---|---|
| Advanced Threat Analytics 1.8 | Microsoft.AdvancedThreatAnalytics.1_8.Folder.Root | Microsoft.AdvancedThreatAnalytics.Folder.Root | Public |
| DisplayName | ID | ImageID | |
|---|---|---|---|
 | Advanced Threat Analytics 1.8 Center | Microsoft.AdvancedThreatAnalytics.1_8.Center | Microsoft.AdvancedThreatAnalytics.Center.Small.Icon |
| Advanced Threat Analytics 1.8-gatewaycontainer | Microsoft.AdvancedThreatAnalytics.1_8.Container.Gateway | Microsoft.AdvancedThreatAnalytics.Container.Gateway.Small.Icon |
| Lightweight Advanced Threat Analytics 1.8-gateway | Microsoft.AdvancedThreatAnalytics.1_8.Gateway.LightWeight | Microsoft.AdvancedThreatAnalytics.LightweightGateway.Small.Icon |
| Zelfstandige Advanced Threat Analytics 1.8-gateway | Microsoft.AdvancedThreatAnalytics.1_8.Gateway.Standalone | Microsoft.AdvancedThreatAnalytics.Gateway.Standalone.Small.Icon |
| Advanced Threat Analytics 1.8-service | Microsoft.AdvancedThreatAnalytics.1_8.Service | Microsoft.AdvancedThreatAnalytics.Service.Small.Icon |
| DisplayName | ID | Target | Type | Accessibility | Visible | |
|---|---|---|---|---|---|---|
 | Beveiligingswaarschuwingen | Microsoft.AdvancedThreatAnalytics.1_8.Center.SecurityAlerts | Microsoft.AdvancedThreatAnalytics.1_8.Center | Microsoft.SystemCenter.AlertViewType | Internal | True |
| Statusmeldingen | Microsoft.AdvancedThreatAnalytics.1_8.HealthAlerts | Microsoft.AdvancedThreatAnalytics.1_8.InstancesGroup | Microsoft.SystemCenter.AlertViewType | Public | True |
| Prestatielogboeken en waarschuwingen | Microsoft.AdvancedThreatAnalytics.1_8.PerformanceAlerts | Microsoft.AdvancedThreatAnalytics.1_8.InstancesGroup | Microsoft.SystemCenter.AlertViewType | Public | True |
| ID | Type | Platform | Target | Accessibility | |
|---|---|---|---|---|---|
 | Microsoft.AdvancedThreatAnalytics.1_8.StateGrid.Center.Implementation | Microsoft.AdvancedThreatAnalytics.1_8.StateGrid.Center | Wpf, Silverlight | Public | |
| Microsoft.AdvancedThreatAnalytics.1_8.StateGrid.Details.Implementation | Microsoft.AdvancedThreatAnalytics.1_8.StateGrid.Details | Wpf, Silverlight | Public | |
| Microsoft.AdvancedThreatAnalytics.1_8.StateGrid.Gateway.Implementation | Microsoft.AdvancedThreatAnalytics.1_8.StateGrid.Gateway | Wpf, Silverlight | Public | |
| Microsoft.AdvancedThreatAnalytics.1_8.StateGrid.Implementation | Microsoft.AdvancedThreatAnalytics.1_8.StateGrid | Wpf, Silverlight | Public |
| ID | Type | Parent | Accessibility | |
|---|---|---|---|---|
| Microsoft.AdvancedThreatAnalytics.1_8.StateGrid.Center.Reference | Microsoft.AdvancedThreatAnalytics.1_8.StateGrid.Center | Microsoft.AdvancedThreatAnalytics.1_8.StateGrid | Public |
| Microsoft.AdvancedThreatAnalytics.1_8.StateGrid.Details.Reference | Microsoft.AdvancedThreatAnalytics.1_8.StateGrid.Details | Microsoft.AdvancedThreatAnalytics.1_8.StateGrid | Public |
| Microsoft.AdvancedThreatAnalytics.1_8.StateGrid.Gateway.Reference | Microsoft.AdvancedThreatAnalytics.1_8.StateGrid.Gateway | Microsoft.AdvancedThreatAnalytics.1_8.StateGrid | Public |
| Microsoft.AdvancedThreatAnalytics.1_8.StateGrid.Reference | Microsoft.AdvancedThreatAnalytics.1_8.StateGrid | Microsoft.AdvancedThreatAnalytics.1_8.Folder.Root | Public |
| DisplayName | ID | Accessibility | |
|---|---|---|---|
| Status | Microsoft.AdvancedThreatAnalytics.1_8.StateGrid | Public |
| Integriteitsstatus - Center | Microsoft.AdvancedThreatAnalytics.1_8.StateGrid.Center | Public |
| Integriteitsstatus - details | Microsoft.AdvancedThreatAnalytics.1_8.StateGrid.Details | Public |
| Integriteitsstatus - gateway | Microsoft.AdvancedThreatAnalytics.1_8.StateGrid.Gateway | Public |
Home
NLD 
Show Management Pack References