Advanced Threat Analytics 1.7 中心发现

Microsoft.AdvancedThreatAnalytics.1_7.Center.Discovery (Discovery)

使用 PowerShell 发现 Microsoft ATA 1.7 中心

Knowledge Base article:

Element properties:

Object Discovery Details:

Member Modules:

Source Code:

<Discovery ID="Microsoft.AdvancedThreatAnalytics.1_7.Center.Discovery" Enabled="true" Target="Microsoft.AdvancedThreatAnalytics.1_7.Seed" ConfirmDelivery="true" Remotable="false" Priority="Normal">

  <Category>Discovery</Category>

  <DiscoveryTypes>

    <DiscoveryClass TypeID="Microsoft.AdvancedThreatAnalytics.1_7.Center">

      <Property TypeID="Microsoft.AdvancedThreatAnalytics.1_7.Center" PropertyID="ServerName"/>

      <Property TypeID="Microsoft.AdvancedThreatAnalytics.1_7.Center" PropertyID="Version"/>

      <Property TypeID="Microsoft.AdvancedThreatAnalytics.1_7.Center" PropertyID="ConsoleAddress"/>

      <Property TypeID="Microsoft.AdvancedThreatAnalytics.1_7.Center" PropertyID="ServiceIP"/>

      <Property TypeID="Microsoft.AdvancedThreatAnalytics.1_7.Center" PropertyID="ServicePort"/>

      <Property TypeID="Microsoft.AdvancedThreatAnalytics.1_7.Center" PropertyID="ConsoleCertificateThumbprint"/>

      <Property TypeID="Microsoft.AdvancedThreatAnalytics.1_7.Center" PropertyID="InstallationPath"/>

      <Property TypeID="Microsoft.AdvancedThreatAnalytics.1_7.Center" PropertyID="ADForest"/>

      <Property TypeID="System!System.Entity" PropertyID="DisplayName"/>

    </DiscoveryClass>

    <DiscoveryClass TypeID="Microsoft.AdvancedThreatAnalytics.1_7.Database"/>

  </DiscoveryTypes>

  <DataSource ID="PowerShell" TypeID="Microsoft.AdvancedThreatAnalytics.1_7.Center.Discovery.DataSource">

    <computerName>$Target/Host/Property[Type="Windows!Microsoft.Windows.Computer"]/PrincipalName$</computerName>

    <IntervalSeconds>14400</IntervalSeconds>

  </DataSource>

</Discovery>