Home
  •  

Тип монитора возраста определений уязвимости системы безопасности Microsoft Forefront Endpoint Protection

Microsoft.FEP.SecurityVulnerability.AntimalwareDefinitionsDate.MonitorType (UnitMonitorType)

Element properties:

RunAsDefault
AccessibilityPublic
Support Monitor RecalculateTrue

Member Modules:

ID Module Type TypeId RunAs 
EventDS DataSource Microsoft.FEP.ProtectedServer.AntimalwareDefinitionsEventDSType Default
WMIProbe ProbeAction Microsoft.FEP.AntimalwareWMIProbeActionModuleType Default
CriticalCondition ConditionDetection System.ExpressionFilter Default
HealthyCondition ConditionDetection System.ExpressionFilter Default
WarningCondition ConditionDetection System.ExpressionFilter Default

Overrideable Parameters:

IDParameterTypeSelectorDisplay NameDescription
DelayTimeint$Config/DelayTime$Время задержки (в секундах)
AgeHealthyValueint$Config/AgeHealthyValue$Возраст определений в нормальном состоянии (в днях)Количество дней, при котором определения считаются текущими. Определения старше указанного количества дней считаются устаревшими и находящимися в состоянии предупреждения. Будет создано уведомление. Рекомендуемое значение этого параметра — три дня.
AgeCriticalValueint$Config/AgeCriticalValue$Возраст определений в критическом состоянии (в днях)Количество дней, при котором считается, что устаревшие определения находятся в критическом состоянии. Будет создано оповещение. Рекомендуемое значение этого параметра — пять дней.

Source Code:

<UnitMonitorType ID="Microsoft.FEP.SecurityVulnerability.AntimalwareDefinitionsDate.MonitorType" Accessibility="Public">

  <MonitorTypeStates>

    <MonitorTypeState ID="Healthy" NoDetection="false"/>

    <MonitorTypeState ID="Warning" NoDetection="false"/>

    <MonitorTypeState ID="Critical" NoDetection="false"/>

  </MonitorTypeStates>

  <Configuration>

    <xsd:element minOccurs="1" name="ComputerName" type="xsd:string"/>

    <xsd:element minOccurs="1" name="DelayTime" type="xsd:positiveInteger"/>

    <xsd:element minOccurs="1" name="AgeHealthyValue" type="xsd:positiveInteger"/>

    <xsd:element minOccurs="1" name="AgeCriticalValue" type="xsd:positiveInteger"/>

  </Configuration>

  <OverrideableParameters>

    <OverrideableParameter ID="DelayTime" Selector="$Config/DelayTime$" ParameterType="int"/>

    <OverrideableParameter ID="AgeHealthyValue" Selector="$Config/AgeHealthyValue$" ParameterType="int"/>

    <OverrideableParameter ID="AgeCriticalValue" Selector="$Config/AgeCriticalValue$" ParameterType="int"/>

  </OverrideableParameters>

  <MonitorImplementation>

    <MemberModules>

      <DataSource ID="EventDS" TypeID="Microsoft.FEP.ProtectedServer.AntimalwareDefinitionsEventDSType"/>

      <ProbeAction ID="WMIProbe" TypeID="Microsoft.FEP.AntimalwareWMIProbeActionModuleType">

        <ComputerName>$Config/ComputerName$</ComputerName>

        <DelayTime>$Config/DelayTime$</DelayTime>

        <MonitorName>Antimalware Definitions Date</MonitorName>

      </ProbeAction>

      <ConditionDetection ID="CriticalCondition" TypeID="System!System.ExpressionFilter">

        <Expression>

          <And>

            <Expression>

              <SimpleExpression>

                <ValueExpression>

                  <XPathQuery Type="Integer">Property[@Name='AntivirusSignatureAge']</XPathQuery>

                </ValueExpression>

                <Operator>NotEqual</Operator>

                <ValueExpression>

                  <Value Type="Integer">-1</Value>

                </ValueExpression>

              </SimpleExpression>

            </Expression>

            <Expression>

              <SimpleExpression>

                <ValueExpression>

                  <XPathQuery Type="Integer">Property[@Name='AntivirusSignatureAge']</XPathQuery>

                </ValueExpression>

                <Operator>GreaterEqual</Operator>

                <ValueExpression>

                  <Value Type="Integer">$Config/AgeCriticalValue$</Value>

                </ValueExpression>

              </SimpleExpression>

            </Expression>

          </And>

        </Expression>

      </ConditionDetection>

      <ConditionDetection ID="HealthyCondition" TypeID="System!System.ExpressionFilter">

        <Expression>

          <And>

            <Expression>

              <SimpleExpression>

                <ValueExpression>

                  <XPathQuery Type="Integer">Property[@Name='AntivirusSignatureAge']</XPathQuery>

                </ValueExpression>

                <Operator>NotEqual</Operator>

                <ValueExpression>

                  <Value Type="Integer">-1</Value>

                </ValueExpression>

              </SimpleExpression>

            </Expression>

            <Expression>

              <SimpleExpression>

                <ValueExpression>

                  <XPathQuery Type="Integer">Property[@Name='AntivirusSignatureAge']</XPathQuery>

                </ValueExpression>

                <Operator>LessEqual</Operator>

                <ValueExpression>

                  <Value Type="Integer">$Config/AgeHealthyValue$</Value>

                </ValueExpression>

              </SimpleExpression>

            </Expression>

          </And>

        </Expression>

      </ConditionDetection>

      <ConditionDetection ID="WarningCondition" TypeID="System!System.ExpressionFilter">

        <Expression>

          <And>

            <Expression>

              <SimpleExpression>

                <ValueExpression>

                  <XPathQuery Type="Integer">Property[@Name='AntivirusSignatureAge']</XPathQuery>

                </ValueExpression>

                <Operator>NotEqual</Operator>

                <ValueExpression>

                  <Value Type="Integer">-1</Value>

                </ValueExpression>

              </SimpleExpression>

            </Expression>

            <Expression>

              <SimpleExpression>

                <ValueExpression>

                  <XPathQuery Type="Integer">Property[@Name='AntivirusSignatureAge']</XPathQuery>

                </ValueExpression>

                <Operator>Greater</Operator>

                <ValueExpression>

                  <Value Type="Integer">$Config/AgeHealthyValue$</Value>

                </ValueExpression>

              </SimpleExpression>

            </Expression>

            <Expression>

              <SimpleExpression>

                <ValueExpression>

                  <XPathQuery Type="Integer">Property[@Name='AntivirusSignatureAge']</XPathQuery>

                </ValueExpression>

                <Operator>Less</Operator>

                <ValueExpression>

                  <Value Type="Integer">$Config/AgeCriticalValue$</Value>

                </ValueExpression>

              </SimpleExpression>

            </Expression>

          </And>

        </Expression>

      </ConditionDetection>

    </MemberModules>

    <RegularDetections>

      <RegularDetection MonitorTypeStateID="Healthy">

        <Node ID="HealthyCondition">

          <Node ID="WMIProbe">

            <Node ID="EventDS"/>

          </Node>

        </Node>

      </RegularDetection>

      <RegularDetection MonitorTypeStateID="Warning">

        <Node ID="WarningCondition">

          <Node ID="WMIProbe">

            <Node ID="EventDS"/>

          </Node>

        </Node>

      </RegularDetection>

      <RegularDetection MonitorTypeStateID="Critical">

        <Node ID="CriticalCondition">

          <Node ID="WMIProbe">

            <Node ID="EventDS"/>

          </Node>

        </Node>

      </RegularDetection>

    </RegularDetections>

    <OnDemandDetections>

      <OnDemandDetection MonitorTypeStateID="Healthy">

        <Node ID="HealthyCondition">

          <Node ID="WMIProbe"/>

        </Node>

      </OnDemandDetection>

      <OnDemandDetection MonitorTypeStateID="Warning">

        <Node ID="WarningCondition">

          <Node ID="WMIProbe"/>

        </Node>

      </OnDemandDetection>

      <OnDemandDetection MonitorTypeStateID="Critical">

        <Node ID="CriticalCondition">

          <Node ID="WMIProbe"/>

        </Node>

      </OnDemandDetection>

    </OnDemandDetections>

  </MonitorImplementation>

</UnitMonitorType>