secRMM is a security product from Squadra Technologies which monitors and controls all 'Removable Media' activities in your data centers. Removable Media in this context is any USB removable storage device, removable external hard drives, smart phones, etc. This Operations Manager Management Pack will collect the secRMM events and create Operations Manager alerts.
This management pack incorporates the secRMM product from Squadra Technologies into Microsoft Operations Manager. secRMM is a product that monitors and controls activity to Removable Media devices. secRMM uses the security event log as well as its own event log to record the Removable Media online, offline and write activity. secRMM also allows the ability to authorize access to Removable Media devices by user(s) and/or by program(s).
| DisplayName | ID | Base Class | Abstract | Hosted | Singleton | Group | Extension | Accessibility | |
|---|---|---|---|---|---|---|---|---|---|
 | secRMM | Squadra.secRMM.Event | Microsoft.Windows.LocalApplication | False | True | False | False | False | Internal |
| ID | Target | |
|---|---|---|
 | Cat.Squadra.secRMM.ConsoleTask.SafeCopyApprover.Alert | Squadra.secRMM.ConsoleTask.SafeCopyApprover.Alert |
| Cat.Squadra.secRMM.ConsoleTask.SafeCopyApprover.Computer | Squadra.secRMM.ConsoleTask.SafeCopyApprover.Computer |
| DisplayName | ID | Target | Enabled | |
|---|---|---|---|---|
 | secRMMEvent Discovery | Squadra.secRMM.Event.Discovery | Microsoft.Windows.Computer | True |
| DisplayName | ID | Target | Category | Enabled | Alert Generate | Accessibility | |
|---|---|---|---|---|---|---|---|
 | WMI | Squadra.secRMM.UnitMonitor.WMI | Squadra.secRMM.Event | Custom | True | True | Public |
| DisplayName | ID | Target | Category | Enabled | Alert Generate | |
|---|---|---|---|---|---|---|
 | secRMM AllowBitLockerOnlyEventOnline | Squadra.secRMM.AllowBitLockerOnlyEventOnline | Squadra.secRMM.Event | Alert | True | True |
| secRMM AllowBitLockerOnlyEventWrite | Squadra.secRMM.AllowBitLockerOnlyEventWrite | Squadra.secRMM.Event | Alert | True | True |
| secRMM AllowedDirectoriesAuthorizationFailure | Squadra.secRMM.AllowedDirectoriesAuthorizationFailure | Squadra.secRMM.Event | Alert | True | True |
| secRMM AllowedFileExtensionsAuthorizationFailure | Squadra.secRMM.AllowedFileExtensionsAuthorizationFailure | Squadra.secRMM.Event | Alert | True | True |
| secRMM AllowedInternalIdAuthorizationFailureOnline | Squadra.secRMM.AllowedInternalIdAuthorizationFailureOnline | Squadra.secRMM.Event | Alert | True | True |
| secRMM AllowedInternalIdAuthorizationFailureWrite | Squadra.secRMM.AllowedInternalIdAuthorizationFailureWrite | Squadra.secRMM.Event | Alert | True | True |
| secRMM AllowRMSFilesOnly | Squadra.secRMM.AllowRMSFilesOnly | Squadra.secRMM.Event | Alert | True | True |
| secRMM BlockCdDvdWritesEventOnline | Squadra.secRMM.BlockCdDvdWritesEventOnline | Squadra.secRMM.Event | Alert | True | True |
| secRMM BlockCdDvdWritesEventWrite | Squadra.secRMM.BlockCdDvdWritesEventWrite | Squadra.secRMM.Event | Alert | True | True |
| secRMM BlockProgramsOnDevice | Squadra.secRMM.BlockProgramsOnDevice | Squadra.secRMM.Event | Alert | True | True |
| secRMM Configuration Changed | Squadra.secRMM.ConfigurationChanged | Squadra.secRMM.Event | Alert | True | True |
| secRMM External Message | Squadra.secRMM.External | Squadra.secRMM.Event | Notification | True | True |
| secRMM DeviceFileWriteStart | Squadra.secRMM.FileWriteStart | Squadra.secRMM.Event | Alert | True | True |
| secRMM DeviceFileWritten | Squadra.secRMM.FileWritten | Squadra.secRMM.Event | Alert | True | True |
| secRMM InvalidLicense | Squadra.secRMM.InvalidLicense | Squadra.secRMM.Event | Alert | True | True |
| secRMM ProgramAuthorizationFailure | Squadra.secRMM.ProgramAuthorizationFailure | Squadra.secRMM.Event | Alert | True | True |
| secRMM Property Changed | Squadra.secRMM.PropertyChanged | Squadra.secRMM.Event | Alert | True | True |
| secRMM DeviceOffline | Squadra.secRMM.RMMDeviceOffline | Squadra.secRMM.Event | Alert | True | True |
| secRMM DeviceOnline | Squadra.secRMM.RMMDeviceOnline | Squadra.secRMM.Event | Alert | True | True |
| secRMM SafeCopy PreApproval | Squadra.secRMM.SafeCopyPreApprovalRequest | Squadra.secRMM.Event | Notification | True | True |
| secRMM SerialNumberAuthorizationFailureOnline | Squadra.secRMM.SerialNumberAuthorizationFailureOnline | Squadra.secRMM.Event | Alert | True | True |
| secRMM SerialNumberAuthorizationFailureWrite | Squadra.secRMM.SerialNumberAuthorizationFailureWrite | Squadra.secRMM.Event | Alert | True | True |
| secRMM UnknownSourceFailure | Squadra.secRMM.UnknownSourceFailure | Squadra.secRMM.Event | Alert | True | True |
| secRMM UserAuthorizationFailureOnline | Squadra.secRMM.UserAuthorizationFailureOnline | Squadra.secRMM.Event | Alert | True | True |
| secRMM UserAuthorizationFailureWrite | Squadra.secRMM.UserAuthorizationFailureWrite | Squadra.secRMM.Event | Alert | True | True |
| DisplayName | ID | Target | Accessibility | Category | Enabled | |
|---|---|---|---|---|---|---|
 | Authorize Internal Ids | Squadra.secRMM.AuthorizeInternalIds | Squadra.secRMM.Event | Internal | SecurityHealth | True |
| Authorize Programs | Squadra.secRMM.AuthorizePrograms | Squadra.secRMM.Event | Internal | SecurityHealth | True |
| Authorize Serial Numbers | Squadra.secRMM.AuthorizeSerialNumbers | Squadra.secRMM.Event | Internal | SecurityHealth | True |
| Authorize Users | Squadra.secRMM.AuthorizeUsers | Squadra.secRMM.Event | Internal | SecurityHealth | True |
| secRMM Lockdown mode | Squadra.secRMM.LockdownMode | Squadra.secRMM.Event | Internal | SecurityHealth | True |
| secRMM Monitoring mode | Squadra.secRMM.MonitoringMode | Squadra.secRMM.Event | Internal | SecurityHealth | True |
| DisplayName | ID | Target | Accessibility | Enabled | |
|---|---|---|---|---|---|
 | secRMM SafeCopy Approver | Squadra.secRMM.ConsoleTask.SafeCopyApprover.Alert | Squadra.secRMM.Event | Public | True |
| secRMM SafeCopy Approver | Squadra.secRMM.ConsoleTask.SafeCopyApprover.Computer | Microsoft.Windows.Computer | Public | True |
| DisplayName | ID | FolderName | ElementID | |
|---|---|---|---|---|
 | Removable Media Alerts | Squadra.secRMM.AlertView | Microsoft.SystemCenter.NTServiceAndProcessMonitoring.ViewFolder.Root | Squadra.secRMM.AlertView |
| DisplayName | ID | Target | Type | Accessibility | Visible | |
|---|---|---|---|---|---|---|
 | Removable Media Alerts | Squadra.secRMM.AlertView | Squadra.secRMM.Event | Microsoft.SystemCenter.AlertViewType | Internal | True |
Home
Show Management Pack References