Tipo de monitor de tempo decorrido de definições de vulnerabilidade na segurança do Microsoft Forefront Endpoint Protection

Microsoft.FEP.SecurityVulnerability.AntimalwareDefinitionsDate.MonitorType (UnitMonitorType)

Element properties:

Show References:
- Unit Monitors (1)

RunAs	Default
Accessibility	Public
Support Monitor Recalculate	True

Member Modules:

ID	Module Type	TypeId	RunAs
EventDS	DataSource	Microsoft.FEP.ProtectedServer.AntimalwareDefinitionsEventDSType	Default
WMIProbe	ProbeAction	Microsoft.FEP.AntimalwareWMIProbeActionModuleType	Default
CriticalCondition	ConditionDetection	System.ExpressionFilter	Default
HealthyCondition	ConditionDetection	System.ExpressionFilter	Default
WarningCondition	ConditionDetection	System.ExpressionFilter	Default

Overrideable Parameters:

ID	ParameterType	Selector	Display Name	Description
DelayTime	int	$Config/DelayTime$	Tempo de atraso (segundos)
AgeHealthyValue	int	$Config/AgeHealthyValue$	Tempo decorrido de definições de estado de integridade (dias)	O número de dias em que as definições são consideradas atuais. Definições mais antigas que o número especificado de dias são consideradas desatualizadas e em estado de aviso. Um alerta será gerado. O valor recomendado para esse parâmetro é de três dias.
AgeCriticalValue	int	$Config/AgeCriticalValue$	Tempo decorrido de definições de estado crítico (dias)	O número de dias nos quais definições desatualizadas são consideradas em estado crítico. Um alerta será gerado. O valor recomendado para esse parâmetro é de cinco dias.

Source Code:

<UnitMonitorType ID="Microsoft.FEP.SecurityVulnerability.AntimalwareDefinitionsDate.MonitorType" Accessibility="Public">

  <MonitorTypeStates>

    <MonitorTypeState ID="Healthy" NoDetection="false"/>

    <MonitorTypeState ID="Warning" NoDetection="false"/>

    <MonitorTypeState ID="Critical" NoDetection="false"/>

  </MonitorTypeStates>

  <Configuration>

    <xsd:element minOccurs="1" name="ComputerName" type="xsd:string"/>

    <xsd:element minOccurs="1" name="DelayTime" type="xsd:positiveInteger"/>

    <xsd:element minOccurs="1" name="AgeHealthyValue" type="xsd:positiveInteger"/>

    <xsd:element minOccurs="1" name="AgeCriticalValue" type="xsd:positiveInteger"/>

  </Configuration>

  <OverrideableParameters>

    <OverrideableParameter ID="DelayTime" Selector="$Config/DelayTime$" ParameterType="int"/>

    <OverrideableParameter ID="AgeHealthyValue" Selector="$Config/AgeHealthyValue$" ParameterType="int"/>

    <OverrideableParameter ID="AgeCriticalValue" Selector="$Config/AgeCriticalValue$" ParameterType="int"/>

  </OverrideableParameters>

  <MonitorImplementation>

    <MemberModules>

      <DataSource ID="EventDS" TypeID="Microsoft.FEP.ProtectedServer.AntimalwareDefinitionsEventDSType"/>

      <ProbeAction ID="WMIProbe" TypeID="Microsoft.FEP.AntimalwareWMIProbeActionModuleType">

        <ComputerName>$Config/ComputerName$</ComputerName>

        <DelayTime>$Config/DelayTime$</DelayTime>

        <MonitorName>Antimalware Definitions Date</MonitorName>

      </ProbeAction>

      <ConditionDetection ID="CriticalCondition" TypeID="System!System.ExpressionFilter">

        <Expression>

          <And>

            <Expression>

              <SimpleExpression>

                <ValueExpression>

                  <XPathQuery Type="Integer">Property[@Name='AntivirusSignatureAge']</XPathQuery>

                </ValueExpression>

                <Operator>NotEqual</Operator>

                <ValueExpression>

                  <Value Type="Integer">-1</Value>

                </ValueExpression>

              </SimpleExpression>

            </Expression>

            <Expression>

              <SimpleExpression>

                <ValueExpression>

                  <XPathQuery Type="Integer">Property[@Name='AntivirusSignatureAge']</XPathQuery>

                </ValueExpression>

                <Operator>GreaterEqual</Operator>

                <ValueExpression>

                  <Value Type="Integer">$Config/AgeCriticalValue$</Value>

                </ValueExpression>

              </SimpleExpression>

            </Expression>

          </And>

        </Expression>

      </ConditionDetection>

      <ConditionDetection ID="HealthyCondition" TypeID="System!System.ExpressionFilter">

        <Expression>

          <And>

            <Expression>

              <SimpleExpression>

                <ValueExpression>

                  <XPathQuery Type="Integer">Property[@Name='AntivirusSignatureAge']</XPathQuery>

                </ValueExpression>

                <Operator>NotEqual</Operator>

                <ValueExpression>

                  <Value Type="Integer">-1</Value>

                </ValueExpression>

              </SimpleExpression>

            </Expression>

            <Expression>

              <SimpleExpression>

                <ValueExpression>

                  <XPathQuery Type="Integer">Property[@Name='AntivirusSignatureAge']</XPathQuery>

                </ValueExpression>

                <Operator>LessEqual</Operator>

                <ValueExpression>

                  <Value Type="Integer">$Config/AgeHealthyValue$</Value>

                </ValueExpression>

              </SimpleExpression>

            </Expression>

          </And>

        </Expression>

      </ConditionDetection>

      <ConditionDetection ID="WarningCondition" TypeID="System!System.ExpressionFilter">

        <Expression>

          <And>

            <Expression>

              <SimpleExpression>

                <ValueExpression>

                  <XPathQuery Type="Integer">Property[@Name='AntivirusSignatureAge']</XPathQuery>

                </ValueExpression>

                <Operator>NotEqual</Operator>

                <ValueExpression>

                  <Value Type="Integer">-1</Value>

                </ValueExpression>

              </SimpleExpression>

            </Expression>

            <Expression>

              <SimpleExpression>

                <ValueExpression>

                  <XPathQuery Type="Integer">Property[@Name='AntivirusSignatureAge']</XPathQuery>

                </ValueExpression>

                <Operator>Greater</Operator>

                <ValueExpression>

                  <Value Type="Integer">$Config/AgeHealthyValue$</Value>

                </ValueExpression>

              </SimpleExpression>

            </Expression>

            <Expression>

              <SimpleExpression>

                <ValueExpression>

                  <XPathQuery Type="Integer">Property[@Name='AntivirusSignatureAge']</XPathQuery>

                </ValueExpression>

                <Operator>Less</Operator>

                <ValueExpression>

                  <Value Type="Integer">$Config/AgeCriticalValue$</Value>

                </ValueExpression>

              </SimpleExpression>

            </Expression>

          </And>

        </Expression>

      </ConditionDetection>

    </MemberModules>

    <RegularDetections>

      <RegularDetection MonitorTypeStateID="Healthy">

        <Node ID="HealthyCondition">

          <Node ID="WMIProbe">

            <Node ID="EventDS"/>

          </Node>

        </Node>

      </RegularDetection>

      <RegularDetection MonitorTypeStateID="Warning">

        <Node ID="WarningCondition">

          <Node ID="WMIProbe">

            <Node ID="EventDS"/>

          </Node>

        </Node>

      </RegularDetection>

      <RegularDetection MonitorTypeStateID="Critical">

        <Node ID="CriticalCondition">

          <Node ID="WMIProbe">

            <Node ID="EventDS"/>

          </Node>

        </Node>

      </RegularDetection>

    </RegularDetections>

    <OnDemandDetections>

      <OnDemandDetection MonitorTypeStateID="Healthy">

        <Node ID="HealthyCondition">

          <Node ID="WMIProbe"/>

        </Node>

      </OnDemandDetection>

      <OnDemandDetection MonitorTypeStateID="Warning">

        <Node ID="WarningCondition">

          <Node ID="WMIProbe"/>

        </Node>

      </OnDemandDetection>

      <OnDemandDetection MonitorTypeStateID="Critical">

        <Node ID="CriticalCondition">

          <Node ID="WMIProbe"/>

        </Node>

      </OnDemandDetection>

    </OnDemandDetections>

  </MonitorImplementation>

</UnitMonitorType>