Microsoft System Center Advisor Advanced Threat Analytics events

Microsoft.IntelligencePacks.ATAEvent :: 8.0.1.18 (Management Pack)

Management pack to collect events of Microsoft Advanced Threat Analytics

Management Pack Elements

Show Management Pack References

TypeDefinitions

ModuleTypes

DataSourceModuleType (1)
WriteActionModuleType (2)

Monitoring

Rule (4)
Overrides

RulePropertyOverride (4)

Resources

DeployableAssembly (1)

DataSource Modules (1)

	ID	Isolation	Accessibility
	Microsoft.SystemCenter.ATAEvents.SyslogDataSource	Any	Public

WriteAction Modules (2)

	ID	Isolation	Accessibility
	Microsoft.SystemCenter.ConditionedATASyslogMonitoringAlertWriteAction	Any	Public
	Microsoft.SystemCenter.ConditionedATASyslogSuspiciousActivityWriteAction	Any	Public

Rules (4)

	DisplayName	ID	Target	Category	Enabled	Alert Generate
	Monitoring - ATA events	Microsoft.SystemCenter.ATAEvents.CollectRuleErrors	Microsoft.Windows.Computer	Custom	False	False
	Monitoring - ATA syslog events	Microsoft.SystemCenter.ATAEvents.Syslog.CollectRuleErrors	Microsoft.Windows.Computer	Custom	False	False
	Microsoft System Center Advisor Advanced Threat Analytics syslog events	Microsoft.SystemCenter.ATAEvents.Syslog.CollectSuspiciousActivities	Microsoft.Windows.Computer	EventCollection	False	False
	Microsoft.SystemCenter.CollectATAEvents	Microsoft.SystemCenter.CollectATAEvents	Microsoft.Windows.Computer	EventCollection	False	False

Rule Property Overrides (4)

	ID	Context	Target
	Microsoft.SystemCenter.ATAEvents.CollectRuleErrors.Enable	Microsoft.SystemCenter.Advisor.Library.ServerOptInOutGroup	Microsoft.SystemCenter.ATAEvents.CollectRuleErrors
	Microsoft.SystemCenter.ATAEvents.Syslog.CollectRuleErrors.Enable	Microsoft.SystemCenter.Advisor.Library.ServerOptInOutGroup	Microsoft.SystemCenter.ATAEvents.Syslog.CollectRuleErrors
	Microsoft.SystemCenter.ATAEvents.Syslog.CollectSuspiciousActivities.Enable	Microsoft.SystemCenter.Advisor.Library.ServerOptInOutGroup	Microsoft.SystemCenter.ATAEvents.Syslog.CollectSuspiciousActivities
	Microsoft.SystemCenter.CollectATAEvents.Enable	Microsoft.SystemCenter.Advisor.Library.ServerOptInOutGroup	Microsoft.SystemCenter.CollectATAEvents

Deployable Assemblies (1)

	ID	File Name	Accessibility
	Res.Microsoft.EnterpriseManagement.Mom.Modules.SecurityAtaSyslogModule	Microsoft.EnterpriseManagement.Mom.Modules.SecurityAtaSyslogModule.dll	Public