Security for Removable Media (secRMM) Central Library

Squadra.secRMMCentral :: 6.0.12.0 (Management Pack)

secRMM is a security product from Squadra Technologies which monitors and controls all 'Removable Media' activities in your data centers. Removable Media in this context is any USB removable storage device, removable external hard drives, smart phones, etc. This Operations Manager Management Pack will collect the secRMM events and create Operations Manager alerts. secRMMCentral is an add-on to secRMM. secRMMCentral collects secRMM events from various other computers and stores them in a central event log.

Summary

This management pack incorporates the secRMMCentral product from Squadra Technologies into Microsoft Operations Manager. secRMM is a product that monitors and controls activity to Removable Media devices. secRMM uses the security event log as well as its own event log to record the Removable Media online, offline and write activity. secRMM also allows the ability to authorize access to Removable Media devices by user(s) and/or by program(s). secRMMCentral uses Microsoft event forwarding technology to centralize all the secRMM events into one event log.

External

Squadra Technologies web site

Management Pack Elements

Classes (1)

 DisplayNameIDBase ClassAbstractHostedSingletonGroupExtensionAccessibility
Squadra.secRMMCentral.EventsecRMMCentralSquadra.secRMMCentral.EventMicrosoft.Windows.LocalApplicationFalseTrueFalseFalseFalseInternal

Discoveries (1)

 DisplayNameIDTargetEnabled
Squadra.secRMMCentral.Event.DiscoverysecRMMCentralEvent DiscoverySquadra.secRMMCentral.Event.DiscoveryMicrosoft.Windows.ComputerTrue

Unit Monitors (1)

 DisplayNameIDTargetCategoryEnabledAlert GenerateAccessibility
Squadra.secRMMCentral.UnitMonitor.WinRMWinRMSquadra.secRMMCentral.UnitMonitor.WinRMSquadra.secRMMCentral.EventCustomTrueTruePublic

Rules (22)

 DisplayNameIDTargetCategoryEnabledAlert Generate
Squadra.secRMM.AllowBitLockerOnlyEventOnlinesecRMM AllowBitLockerOnlyEventOnlineSquadra.secRMM.AllowBitLockerOnlyEventOnlineSquadra.secRMMCentral.EventAlertTrueTrue
Squadra.secRMM.AllowBitLockerOnlyEventWritesecRMM AllowBitLockerOnlyEventWriteSquadra.secRMM.AllowBitLockerOnlyEventWriteSquadra.secRMMCentral.EventAlertTrueTrue
Squadra.secRMM.AllowedDirectoriesAuthorizationFailuresecRMM AllowedDirectoriesAuthorizationFailureSquadra.secRMM.AllowedDirectoriesAuthorizationFailureSquadra.secRMMCentral.EventAlertTrueTrue
Squadra.secRMM.AllowedFileExtensionsAuthorizationFailuresecRMM AllowedFileExtensionsAuthorizationFailureSquadra.secRMM.AllowedFileExtensionsAuthorizationFailureSquadra.secRMMCentral.EventAlertTrueTrue
Squadra.secRMM.AllowedInternalIdAuthorizationFailureOnlinesecRMM AllowedInternalIdAuthorizationFailureOnlineSquadra.secRMM.AllowedInternalIdAuthorizationFailureOnlineSquadra.secRMMCentral.EventAlertTrueTrue
Squadra.secRMM.AllowedInternalIdAuthorizationFailureWritesecRMM AllowedInternalIdAuthorizationFailureWriteSquadra.secRMM.AllowedInternalIdAuthorizationFailureWriteSquadra.secRMMCentral.EventAlertTrueTrue
Squadra.secRMM.BlockCdDvdWritesEventOnlinesecRMM BlockCdDvdWritesEventOnlineSquadra.secRMM.BlockCdDvdWritesEventOnlineSquadra.secRMMCentral.EventAlertTrueTrue
Squadra.secRMM.BlockCdDvdWritesEventWritesecRMM BlockCdDvdWritesEventWriteSquadra.secRMM.BlockCdDvdWritesEventWriteSquadra.secRMMCentral.EventAlertTrueTrue
Squadra.secRMM.ExternalsecRMM External MessageSquadra.secRMM.ExternalSquadra.secRMMCentral.EventNotificationTrueTrue
Squadra.secRMM.FileWriteStartsecRMM DeviceFileWriteStartSquadra.secRMM.FileWriteStartSquadra.secRMMCentral.EventAlertTrueTrue
Squadra.secRMM.FileWrittensecRMM DeviceFileWrittenSquadra.secRMM.FileWrittenSquadra.secRMMCentral.EventAlertTrueTrue
Squadra.secRMM.InvalidLicensesecRMM InvalidLicenseSquadra.secRMM.InvalidLicenseSquadra.secRMMCentral.EventAlertTrueTrue
Squadra.secRMM.ProgramAuthorizationFailuresecRMM ProgramAuthorizationFailureSquadra.secRMM.ProgramAuthorizationFailureSquadra.secRMMCentral.EventAlertTrueTrue
Squadra.secRMM.PropertyChangedsecRMM Property ChangedSquadra.secRMM.PropertyChangedSquadra.secRMMCentral.EventAlertTrueTrue
Squadra.secRMM.RMMDeviceOfflinesecRMM DeviceOfflineSquadra.secRMM.RMMDeviceOfflineSquadra.secRMMCentral.EventAlertTrueTrue
Squadra.secRMM.RMMDeviceOnlinesecRMM DeviceOnlineSquadra.secRMM.RMMDeviceOnlineSquadra.secRMMCentral.EventAlertTrueTrue
Squadra.secRMM.SafeCopyPreApprovalRequestsecRMM SafeCopy PreApprovalSquadra.secRMM.SafeCopyPreApprovalRequestSquadra.secRMMCentral.EventNotificationTrueTrue
Squadra.secRMM.SerialNumberAuthorizationFailureOnlinesecRMM SerialNumberAuthorizationFailureOnlineSquadra.secRMM.SerialNumberAuthorizationFailureOnlineSquadra.secRMMCentral.EventAlertTrueTrue
Squadra.secRMM.SerialNumberAuthorizationFailureWritesecRMM SerialNumberAuthorizationFailureWriteSquadra.secRMM.SerialNumberAuthorizationFailureWriteSquadra.secRMMCentral.EventAlertTrueTrue
Squadra.secRMM.UnknownSourceFailuresecRMM UnknownSourceFailureSquadra.secRMM.UnknownSourceFailureSquadra.secRMMCentral.EventAlertTrueTrue
Squadra.secRMM.UserAuthorizationFailureOnlinesecRMM UserAuthorizationFailureOnlineSquadra.secRMM.UserAuthorizationFailureOnlineSquadra.secRMMCentral.EventAlertTrueTrue
Squadra.secRMM.UserAuthorizationFailureWritesecRMM UserAuthorizationFailureWriteSquadra.secRMM.UserAuthorizationFailureWriteSquadra.secRMMCentral.EventAlertTrueTrue

Folder Items (1)

 DisplayNameIDFolderNameElementID
Squadra.secRMMCentral.AlertViewRemovable Media Central AlertsSquadra.secRMMCentral.AlertViewMicrosoft.SystemCenter.NTServiceAndProcessMonitoring.ViewFolder.RootSquadra.secRMMCentral.AlertView

Views (1)

 DisplayNameIDTargetTypeAccessibilityVisible
Squadra.secRMMCentral.AlertViewRemovable Media Central AlertsSquadra.secRMMCentral.AlertViewSquadra.secRMMCentral.EventMicrosoft.SystemCenter.AlertViewTypeInternalTrue