Home
  •  

Detectie van gedistribueerde toepassingen van Advanced Threat Analytics 1.8

Microsoft.AdvancedThreatAnalytics.1_8.DistributedApplication.Discovery (Discovery)

Hiermee worden gedistribueerde toepassingen van Microsoft ATA 1.8 gedetecteerd met PowerShell

Knowledge Base article:

Samenvatting

Met deze detectiefunctie worden gedistribueerde toepassingen van Microsoft ATA 1.8 gedetecteerd

Element properties:

TargetMicrosoft.SystemCenter.AllManagementServersPool
EnabledTrue
Frequency14400
RemotableFalse

Object Discovery Details:

Discovered Classes and their attribuets:
Discovered relationships and their attribuets:

Member Modules:

ID Module Type TypeId RunAs 
PowerShell DataSource Microsoft.AdvancedThreatAnalytics.1_8.DistributedApplication.Discovery.DataSource Default

Source Code:

<Discovery ID="Microsoft.AdvancedThreatAnalytics.1_8.DistributedApplication.Discovery" Enabled="true" Target="SC!Microsoft.SystemCenter.AllManagementServersPool" ConfirmDelivery="true" Remotable="true" Priority="Normal">

  <Category>Discovery</Category>

  <DiscoveryTypes>

    <DiscoveryClass TypeID="Microsoft.AdvancedThreatAnalytics.1_8.Service">

      <Property TypeID="Microsoft.AdvancedThreatAnalytics.1_8.Service" PropertyID="ADForest"/>

    </DiscoveryClass>

    <DiscoveryRelationship TypeID="Microsoft.AdvancedThreatAnalytics.1_8.Service.contains.Microsoft.AdvancedThreatAnalytics.1_8.Center"/>

    <DiscoveryRelationship TypeID="Microsoft.AdvancedThreatAnalytics.1_8.Service.contains.Microsoft.AdvancedThreatAnalytics.1_8.Container.Gateway"/>

    <DiscoveryRelationship TypeID="Microsoft.AdvancedThreatAnalytics.1_8.Container.Gateway.contains.Microsoft.AdvancedThreatAnalytics.1_8.Gateway.Standalone"/>

    <DiscoveryRelationship TypeID="Microsoft.AdvancedThreatAnalytics.1_8.Container.Gateway.contains.Microsoft.AdvancedThreatAnalytics.1_8.Gateway.LightWeight"/>

  </DiscoveryTypes>

  <DataSource ID="PowerShell" TypeID="Microsoft.AdvancedThreatAnalytics.1_8.DistributedApplication.Discovery.DataSource">

    <IntervalSeconds>14400</IntervalSeconds>

  </DataSource>

</Discovery>