Microsoft.FEP.SecurityRootCause.MalwareActivity.PingMonitorType (UnitMonitorType)

Element properties:

Show References:
- Unit Monitors (1)

RunAs	Default
Accessibility	Public
Support Monitor Recalculate	False

Member Modules:

ID	Module Type	TypeId	RunAs
Scheduler	DataSource	System.Scheduler	Default
ErrorFilter	ConditionDetection	System.ExpressionFilter	Default
SuccessFilter	ConditionDetection	System.ExpressionFilter	Default

Source Code:

<UnitMonitorType ID="Microsoft.FEP.SecurityRootCause.MalwareActivity.PingMonitorType" Accessibility="Public">

  <MonitorTypeStates>

    <MonitorTypeState ID="Reachable" NoDetection="false"/>

    <MonitorTypeState ID="Unreachable" NoDetection="false"/>

  </MonitorTypeStates>

  <Configuration/>

  <OverrideableParameters/>

  <MonitorImplementation>

    <MemberModules>

      <DataSource ID="Scheduler" TypeID="System!System.Scheduler">

        <Scheduler>

          <SimpleReccuringSchedule>

            <Interval Unit="Seconds">86400</Interval>

          </SimpleReccuringSchedule>

          <ExcludeDates/>

        </Scheduler>

      </DataSource>

      <ConditionDetection ID="ErrorFilter" TypeID="System!System.ExpressionFilter">

        <Expression>

          <SimpleExpression>

            <ValueExpression>

              <Value Type="UnsignedInteger">1</Value>

            </ValueExpression>

            <Operator>Equal</Operator>

            <ValueExpression>

              <Value Type="UnsignedInteger">0</Value>

            </ValueExpression>

          </SimpleExpression>

        </Expression>

      </ConditionDetection>

      <ConditionDetection ID="SuccessFilter" TypeID="System!System.ExpressionFilter">

        <Expression>

          <SimpleExpression>

            <ValueExpression>

              <Value Type="UnsignedInteger">0</Value>

            </ValueExpression>

            <Operator>Equal</Operator>

            <ValueExpression>

              <Value Type="UnsignedInteger">0</Value>

            </ValueExpression>

          </SimpleExpression>

        </Expression>

      </ConditionDetection>

    </MemberModules>

    <RegularDetections>

      <RegularDetection MonitorTypeStateID="Unreachable">

        <Node ID="ErrorFilter">

          <Node ID="Scheduler"/>

        </Node>

      </RegularDetection>

      <RegularDetection MonitorTypeStateID="Reachable">

        <Node ID="SuccessFilter">

          <Node ID="Scheduler"/>

        </Node>

      </RegularDetection>

    </RegularDetections>

  </MonitorImplementation>

</UnitMonitorType>