Home
  •  

Antimalware Engine

Microsoft.FEP.SecurityRootCause.AntimalwareEngine.AMStatus.Monitor (DependencyMonitor)

This monitor tracks the health of the antimalware client and service.

Knowledge Base article:

Summary

It is recommended that the antimalware service is running at all times.

Configuration

The monitor reports a Critical state when the antimalware service in the client machine is not running or not responsive, or when the antimalware engine is not working properly.

Causes

There are cases in which malware activity disables the antimalware service. It is recommended that you investigate the root cause of the failure.

Resolutions

Attempt to restart the antimalware engine on the computer. After the antimalware service is running, it is recommended to rescan the computer for threats.

External

http://go.microsoft.com/fwlink/?LinkId=204703

Element properties:

TargetMicrosoft.FEP.SecurityRootCause.AntimalwareEngine
Parent MonitorSystem.Health.SecurityState
AlgorithmWorstOf
Source MonitorMicrosoft.FEP.ProtectedServer.AMStatus.Monitor
RelationshipMicrosoft.FEP.AntimalwareEngineReferencesProtectedServer
CategoryCustom
EnabledTrue
Alert GenerateFalse
Alert Auto ResolveFalse
RemotableTrue
AccessibilityPublic

Source Code:

<DependencyMonitor ID="Microsoft.FEP.SecurityRootCause.AntimalwareEngine.AMStatus.Monitor" Accessibility="Public" Enabled="true" Target="FEPLibrary!Microsoft.FEP.SecurityRootCause.AntimalwareEngine" ParentMonitorID="Health!System.Health.SecurityState" Remotable="true" Priority="Normal" RelationshipType="FEPLibrary!Microsoft.FEP.AntimalwareEngineReferencesProtectedServer" MemberMonitor="Microsoft.FEP.ProtectedServer.AMStatus.Monitor">

  <Category>Custom</Category>

  <Algorithm>WorstOf</Algorithm>

  <MemberUnAvailable>Error</MemberUnAvailable>

</DependencyMonitor>