This monitor forwards the Configuration Manager repeated malware detection alert to the Configuration Manager console.
Configuration Manager generates an alert when it detects that a type of malware is repeatedly detected on a device in a collection.
Configuration Manager repeatedly detects the same type of malware on a devices in the collection.
Check the Endpoint Protection dashboard and reports in the Configuration Manager console for detailed information about the devices and the detected malware.
Remove the malware.
Target | MECM.AlertRepeatedMalwareDetection | ||
Parent Monitor | System.Health.ConfigurationState | ||
Category | Custom | ||
Enabled | False | ||
Alert Generate | True | ||
Alert Severity | MatchMonitorHealth | ||
Alert Priority | Normal | ||
Alert Auto Resolve | True | ||
Monitor Type | MECM.EPAlertState.MT | ||
Remotable | True | ||
Accessibility | Public | ||
Alert Message |
| ||
RunAs | Default |
<UnitMonitor ID="MECM.RepeatedMalwareDetection.EPAlertState.Monitor" Accessibility="Public" Enabled="false" Target="MECM.AlertRepeatedMalwareDetection" ParentMonitorID="Health!System.Health.ConfigurationState" Remotable="true" Priority="Normal" TypeID="MECM.EPAlertState.MT" ConfirmDelivery="true">
<Category>Custom</Category>
<AlertSettings AlertMessage="MECM.RepeatedMalwareDetection.EPAlertState.Monitor.AlertMessage">
<AlertOnState>Warning</AlertOnState>
<AutoResolve>true</AutoResolve>
<AlertPriority>Normal</AlertPriority>
<AlertSeverity>MatchMonitorHealth</AlertSeverity>
</AlertSettings>
<OperationalStates>
<OperationalState ID="UIGeneratedOpStateId21668ad91a804d8da52e10ca5c87e39f" MonitorTypeStateID="Good" HealthState="Success"/>
<OperationalState ID="UIGeneratedOpStateId10a01dcc0d1847f2b9c256f90448c84d" MonitorTypeStateID="Warning" HealthState="Warning"/>
<OperationalState ID="UIGeneratedOpStateId8209facd786f4439b243d9b765681ac6" MonitorTypeStateID="Error" HealthState="Error"/>
</OperationalStates>
<Configuration>
<TypeId>$Target/Property[Type="MECM.AlertBaseClass"]/TypeId$</TypeId>
<TypeInstanceId>$Target/Property[Type="MECM.AlertBaseClass"]/TypeInstanceId$</TypeInstanceId>
<IntervalSeconds>900</IntervalSeconds>
<ProviderLocation>$Target/Host/Property[Type="MECM.SiteServer"]/ProviderLocation$</ProviderLocation>
<SiteCode>$Target/Host/Property[Type="MECM.Server"]/SiteCode$</SiteCode>
</Configuration>
</UnitMonitor>