Security for Removable Media (secRMM) Central Library (Squadra.secRMMCentral)

secRMM is a security product from Squadra Technologies which monitors and controls all 'Removable Media' activities in your data centers. Removable Media in this context is any USB removable storage device, removable external hard drives, smart phones, etc. This Operations Manager Management Pack will collect the secRMM events and create Operations Manager alerts. secRMMCentral is an add-on to secRMM. secRMMCentral collects secRMM events from various other computers and stores them in a central event log.

Summary

This management pack incorporates the secRMMCentral product from Squadra Technologies into Microsoft Operations Manager. secRMM is a product that monitors and controls activity to Removable Media devices. secRMM uses the security event log as well as its own event log to record the Removable Media online, offline and write activity. secRMM also allows the ability to authorize access to Removable Media devices by user(s) and/or by program(s). secRMMCentral uses Microsoft event forwarding technology to centralize all the secRMM events into one event log.

External

Squadra Technologies web site

Management Pack Elements

Classes (1)

System.Entity

System.ConfigItem

System.LogicalEntity

System.LocalApplication

Microsoft.Windows.LocalApplication

Squadra.secRMMCentral.Event

	DisplayName	ID	Base Class	Abstract	Hosted	Singleton	Group	Extension	Accessibility
	secRMMCentral	Squadra.secRMMCentral.Event	Microsoft.Windows.LocalApplication	False	True	False	False	False	Internal

Discoveries (1)

	DisplayName	ID	Target	Enabled
	secRMMCentralEvent Discovery	Squadra.secRMMCentral.Event.Discovery	Microsoft.Windows.Computer	True

Unit Monitors (1)

	DisplayName	ID	Target	Category	Enabled	Alert Generate	Accessibility
	WinRM	Squadra.secRMMCentral.UnitMonitor.WinRM	Squadra.secRMMCentral.Event	Custom	True	True	Public

Rules (25)

DisplayName	ID	Target	Category	Enabled	Alert Generate
secRMM AllowBitLockerOnlyEventOnline	Squadra.secRMM.AllowBitLockerOnlyEventOnline	Squadra.secRMMCentral.Event	Alert	True	True
secRMM AllowBitLockerOnlyEventWrite	Squadra.secRMM.AllowBitLockerOnlyEventWrite	Squadra.secRMMCentral.Event	Alert	True	True
secRMM AllowedDirectoriesAuthorizationFailure	Squadra.secRMM.AllowedDirectoriesAuthorizationFailure	Squadra.secRMMCentral.Event	Alert	True	True
secRMM AllowedFileExtensionsAuthorizationFailure	Squadra.secRMM.AllowedFileExtensionsAuthorizationFailure	Squadra.secRMMCentral.Event	Alert	True	True
secRMM AllowedInternalIdAuthorizationFailureOnline	Squadra.secRMM.AllowedInternalIdAuthorizationFailureOnline	Squadra.secRMMCentral.Event	Alert	True	True
secRMM AllowedInternalIdAuthorizationFailureWrite	Squadra.secRMM.AllowedInternalIdAuthorizationFailureWrite	Squadra.secRMMCentral.Event	Alert	True	True
secRMM AllowRMSFilesOnly	Squadra.secRMM.AllowRMSFilesOnly	Squadra.secRMMCentral.Event	Alert	True	True
secRMM BlockCdDvdWritesEventOnline	Squadra.secRMM.BlockCdDvdWritesEventOnline	Squadra.secRMMCentral.Event	Alert	True	True
secRMM BlockCdDvdWritesEventWrite	Squadra.secRMM.BlockCdDvdWritesEventWrite	Squadra.secRMMCentral.Event	Alert	True	True
secRMM BlockProgramsOnDevice	Squadra.secRMM.BlockProgramsOnDevice	Squadra.secRMMCentral.Event	Alert	True	True
secRMM Configuration Changed	Squadra.secRMM.ConfigurationChanged	Squadra.secRMMCentral.Event	Alert	True	True
secRMM External Message	Squadra.secRMM.External	Squadra.secRMMCentral.Event	Notification	True	True
secRMM DeviceFileWriteStart	Squadra.secRMM.FileWriteStart	Squadra.secRMMCentral.Event	Alert	True	True
secRMM DeviceFileWritten	Squadra.secRMM.FileWritten	Squadra.secRMMCentral.Event	Alert	True	True
secRMM InvalidLicense	Squadra.secRMM.InvalidLicense	Squadra.secRMMCentral.Event	Alert	True	True
secRMM ProgramAuthorizationFailure	Squadra.secRMM.ProgramAuthorizationFailure	Squadra.secRMMCentral.Event	Alert	True	True
secRMM Property Changed	Squadra.secRMM.PropertyChanged	Squadra.secRMMCentral.Event	Alert	True	True
secRMM DeviceOffline	Squadra.secRMM.RMMDeviceOffline	Squadra.secRMMCentral.Event	Alert	True	True
secRMM DeviceOnline	Squadra.secRMM.RMMDeviceOnline	Squadra.secRMMCentral.Event	Alert	True	True
secRMM SafeCopy PreApproval	Squadra.secRMM.SafeCopyPreApprovalRequest	Squadra.secRMMCentral.Event	Notification	True	True
secRMM SerialNumberAuthorizationFailureOnline	Squadra.secRMM.SerialNumberAuthorizationFailureOnline	Squadra.secRMMCentral.Event	Alert	True	True
secRMM SerialNumberAuthorizationFailureWrite	Squadra.secRMM.SerialNumberAuthorizationFailureWrite	Squadra.secRMMCentral.Event	Alert	True	True
secRMM UnknownSourceFailure	Squadra.secRMM.UnknownSourceFailure	Squadra.secRMMCentral.Event	Alert	True	True
secRMM UserAuthorizationFailureOnline	Squadra.secRMM.UserAuthorizationFailureOnline	Squadra.secRMMCentral.Event	Alert	True	True
secRMM UserAuthorizationFailureWrite	Squadra.secRMM.UserAuthorizationFailureWrite	Squadra.secRMMCentral.Event	Alert	True	True

Security for Removable Media (secRMM) Central Library

Squadra.secRMMCentral :: 9.9.0.0 (Management Pack)