Microsoft Advanced Threat Analytics 1.8 - Overrides

Microsoft.AdvancedThreatAnalytics.1_8.Overrides :: 1.9.0.0 (Management Pack)

Management Pack for Microsoft Advanced Threat Analytics 1.8 - Overrides

• Show Management Pack XML
• Get Management Pack data in Excel format
• Microsoft.AdvancedThreatAnalytics.1_8.Overrides.mpb

Management Pack Elements

Rule Property Overrides (22)

	ID	Context	Target
	Microsoft.AdvancedThreatAnalytics.1_8.Center.AbnormalBehaviorSuspiciousActivity.Override	Microsoft.AdvancedThreatAnalytics.1_8.Center	Microsoft.AdvancedThreatAnalytics.1_8.Center.AbnormalBehaviorSuspiciousActivity
	Microsoft.AdvancedThreatAnalytics.1_8.Center.AbnormalProtocolSuspiciousActivity.Override	Microsoft.AdvancedThreatAnalytics.1_8.Center	Microsoft.AdvancedThreatAnalytics.1_8.Center.AbnormalProtocolSuspiciousActivity
	Microsoft.AdvancedThreatAnalytics.1_8.Center.AbnormalSensitiveGroupMembershipChangeSuspiciousActivity.Override	Microsoft.AdvancedThreatAnalytics.1_8.Center	Microsoft.AdvancedThreatAnalytics.1_8.Center.AbnormalSensitiveGroupMembershipChangeSuspiciousActivity
	Microsoft.AdvancedThreatAnalytics.1_8.Center.AbnormalVpnSuspiciousActivity.Override	Microsoft.AdvancedThreatAnalytics.1_8.Center	Microsoft.AdvancedThreatAnalytics.1_8.Center.AbnormalVpnSuspiciousActivity
	Microsoft.AdvancedThreatAnalytics.1_8.Center.AccountEnumerationSuspiciousActivity.Override	Microsoft.AdvancedThreatAnalytics.1_8.Center	Microsoft.AdvancedThreatAnalytics.1_8.Center.AccountEnumerationSuspiciousActivity
	Microsoft.AdvancedThreatAnalytics.1_8.Center.BruteForceSuspiciousActivity.Override	Microsoft.AdvancedThreatAnalytics.1_8.Center	Microsoft.AdvancedThreatAnalytics.1_8.Center.BruteForceSuspiciousActivity
	Microsoft.AdvancedThreatAnalytics.1_8.Center.ComputerPreauthenticationFailedSuspiciousActivity.Override	Microsoft.AdvancedThreatAnalytics.1_8.Center	Microsoft.AdvancedThreatAnalytics.1_8.Center.ComputerPreauthenticationFailedSuspiciousActivity
	Microsoft.AdvancedThreatAnalytics.1_8.Center.DirectoryServicesReplicationSuspiciousActivity.Override	Microsoft.AdvancedThreatAnalytics.1_8.Center	Microsoft.AdvancedThreatAnalytics.1_8.Center.DirectoryServicesReplicationSuspiciousActivity
	Microsoft.AdvancedThreatAnalytics.1_8.Center.DnsReconnaissanceSuspiciousActivity.Override	Microsoft.AdvancedThreatAnalytics.1_8.Center	Microsoft.AdvancedThreatAnalytics.1_8.Center.DnsReconnaissanceSuspiciousActivity
	Microsoft.AdvancedThreatAnalytics.1_8.Center.EncryptionDowngradeSuspiciousActivity.Override	Microsoft.AdvancedThreatAnalytics.1_8.Center	Microsoft.AdvancedThreatAnalytics.1_8.Center.EncryptionDowngradeSuspiciousActivity
	Microsoft.AdvancedThreatAnalytics.1_8.Center.EnumerateSessionsSuspiciousActivity.Override	Microsoft.AdvancedThreatAnalytics.1_8.Center	Microsoft.AdvancedThreatAnalytics.1_8.Center.EnumerateSessionsSuspiciousActivity
	Microsoft.AdvancedThreatAnalytics.1_8.Center.ForgedPacSuspiciousActivity.Override	Microsoft.AdvancedThreatAnalytics.1_8.Center	Microsoft.AdvancedThreatAnalytics.1_8.Center.ForgedPacSuspiciousActivity
	Microsoft.AdvancedThreatAnalytics.1_8.Center.GoldenTicketSuspiciousActivity.Override	Microsoft.AdvancedThreatAnalytics.1_8.Center	Microsoft.AdvancedThreatAnalytics.1_8.Center.GoldenTicketSuspiciousActivity
	Microsoft.AdvancedThreatAnalytics.1_8.Center.HoneytokenActivitySuspiciousActivity.Override	Microsoft.AdvancedThreatAnalytics.1_8.Center	Microsoft.AdvancedThreatAnalytics.1_8.Center.HoneytokenActivitySuspiciousActivity
	Microsoft.AdvancedThreatAnalytics.1_8.Center.LdapBruteForceSuspiciousActivity.Override	Microsoft.AdvancedThreatAnalytics.1_8.Center	Microsoft.AdvancedThreatAnalytics.1_8.Center.LdapBruteForceSuspiciousActivity
	Microsoft.AdvancedThreatAnalytics.1_8.Center.LdapCleartextPasswordSuspiciousActivity.Override	Microsoft.AdvancedThreatAnalytics.1_8.Center	Microsoft.AdvancedThreatAnalytics.1_8.Center.LdapCleartextPasswordSuspiciousActivity
	Microsoft.AdvancedThreatAnalytics.1_8.Center.MassiveObjectDeletionSuspiciousActivity.Override	Microsoft.AdvancedThreatAnalytics.1_8.Center	Microsoft.AdvancedThreatAnalytics.1_8.Center.MassiveObjectDeletionSuspiciousActivity
	Microsoft.AdvancedThreatAnalytics.1_8.Center.PassTheHashSuspiciousActivity.Override	Microsoft.AdvancedThreatAnalytics.1_8.Center	Microsoft.AdvancedThreatAnalytics.1_8.Center.PassTheHashSuspiciousActivity
	Microsoft.AdvancedThreatAnalytics.1_8.Center.PassTheTicketSuspiciousActivity.Override	Microsoft.AdvancedThreatAnalytics.1_8.Center	Microsoft.AdvancedThreatAnalytics.1_8.Center.PassTheTicketSuspiciousActivity
	Microsoft.AdvancedThreatAnalytics.1_8.Center.RemoteExecutionSuspiciousActivity.Override	Microsoft.AdvancedThreatAnalytics.1_8.Center	Microsoft.AdvancedThreatAnalytics.1_8.Center.RemoteExecutionSuspiciousActivity
	Microsoft.AdvancedThreatAnalytics.1_8.Center.RetrieveDataProtectionBackupKeySuspiciousActivity.Override	Microsoft.AdvancedThreatAnalytics.1_8.Center	Microsoft.AdvancedThreatAnalytics.1_8.Center.RetrieveDataProtectionBackupKeySuspiciousActivity
	Microsoft.AdvancedThreatAnalytics.1_8.Center.SamrReconnaissanceSuspiciousActivity.Override	Microsoft.AdvancedThreatAnalytics.1_8.Center	Microsoft.AdvancedThreatAnalytics.1_8.Center.SamrReconnaissanceSuspiciousActivity