Microsoft System Center Advisor Threat Event Collection

Microsoft.IntelligencePacks.ThreatDetection :: 8.0.1.18 (Management Pack)

Management pack to collect security events for Security Intelligence

Management Pack Elements

Rules (10)

 DisplayNameIDTargetCategoryEnabledAlert Generate
Microsoft.RomeDetection.EnableAscPoliciesMicrosoft Azure Security Center policies runnerMicrosoft.RomeDetection.EnableAscPoliciesMicrosoft.Windows.ComputerCustomFalseFalse
Microsoft.RomeDetection.EnableAscPolicies.CollectRuleErrorsMonitoring - Microsoft Azure Security Center policies runnerMicrosoft.RomeDetection.EnableAscPolicies.CollectRuleErrorsMicrosoft.Windows.ComputerCustomFalseFalse
Microsoft.SystemCenter.AppLockerEventExeAndDll.CollectRuleErrorsMonitoring - AppLocker events of type EXE and DLLMicrosoft.SystemCenter.AppLockerEventExeAndDll.CollectRuleErrorsMicrosoft.Windows.ComputerCustomFalseFalse
Microsoft.SystemCenter.AppLockerEventMsiAndScript.CollectRuleErrorsMonitoring - AppLocker events of type MSI and ScriptMicrosoft.SystemCenter.AppLockerEventMsiAndScript.CollectRuleErrorsMicrosoft.Windows.ComputerCustomFalseFalse
Microsoft.SystemCenter.CollectAppLockerEventExeAndDllCollect AppLocker EventsMicrosoft.SystemCenter.CollectAppLockerEventExeAndDllMicrosoft.Windows.ComputerEventCollectionFalseFalse
Microsoft.SystemCenter.CollectAppLockerEventMsiAndScriptCollect AppLocker EventsMicrosoft.SystemCenter.CollectAppLockerEventMsiAndScriptMicrosoft.Windows.ComputerEventCollectionFalseFalse
Microsoft.SystemCenter.CollectThreatDetectionSecurityEventCollect Security EventsMicrosoft.SystemCenter.CollectThreatDetectionSecurityEventMicrosoft.Windows.ComputerEventCollectionFalseFalse
Microsoft.SystemCenter.CollectThreatDetectionSystemEventCollect System EventsMicrosoft.SystemCenter.CollectThreatDetectionSystemEventMicrosoft.Windows.ComputerEventCollectionFalseFalse
Microsoft.SystemCenter.ThreatDetection.CollectRuleErrors.SecurityEventMonitoring - Threat detection security eventsMicrosoft.SystemCenter.ThreatDetection.CollectRuleErrors.SecurityEventMicrosoft.Windows.ComputerCustomFalseFalse
Microsoft.SystemCenter.ThreatDetection.CollectRuleErrors.SystemEventMonitoring - Threat detection system eventsMicrosoft.SystemCenter.ThreatDetection.CollectRuleErrors.SystemEventMicrosoft.Windows.ComputerCustomFalseFalse