Este monitor reencaminha o alerta de ataque de software maligno do Configuration Manager para a consola do Configuration Manager.
O Configuration Manager gera um alerta quando deteta que a percentagem de dispositivos infetados com software maligno de uma coleção específica excede o limiar predefinido.
Para alterar o limiar de alerta
Abra a consola do Configuration Manager.
Navegue para a coleção e abra as respetivas propriedades.
Na caixa de diálogo das propriedades, clique no separador Alerta.
Modifique o limiar de ataque de software maligno.
O Configuration Manager detetou que vários dispositivos de uma coleção estão infetados com software maligno.
Verifique o dashboard do Endpoint Protection e os relatórios da consola do Configuration Manager para obter informações detalhadas sobre os dispositivos e o software maligno detetado.
Remova o software maligno.
Target | Microsoft.SystemCenter2012.ConfigurationManager.AlertMalwareOutbreak | ||
Parent Monitor | System.Health.ConfigurationState | ||
Category | Custom | ||
Enabled | False | ||
Alert Generate | True | ||
Alert Severity | MatchMonitorHealth | ||
Alert Priority | Normal | ||
Alert Auto Resolve | True | ||
Monitor Type | Microsoft.SystemCenter2012.ConfigurationManager.EPAlertStateMonitor | ||
Remotable | True | ||
Accessibility | Public | ||
Alert Message |
| ||
RunAs | Default | ||
Comment | SIV:FEP0002 |
<UnitMonitor ID="Microsoft.SystemCenter2012.ConfigurationManager.MalwareOutBreakMonitor" Comment="SIV:FEP0002" Accessibility="Public" Enabled="false" Target="SCCM!Microsoft.SystemCenter2012.ConfigurationManager.AlertMalwareOutbreak" ParentMonitorID="SystemHealth!System.Health.ConfigurationState" Remotable="true" Priority="Normal" TypeID="Microsoft.SystemCenter2012.ConfigurationManager.EPAlertStateMonitor" ConfirmDelivery="true">
<Category>Custom</Category>
<AlertSettings AlertMessage="Microsoft.SystemCenter2012.ConfigurationManager.MalwareOutBreakMonitor_AlertMessageResourceID">
<AlertOnState>Warning</AlertOnState>
<AutoResolve>true</AutoResolve>
<AlertPriority>Normal</AlertPriority>
<AlertSeverity>MatchMonitorHealth</AlertSeverity>
</AlertSettings>
<OperationalStates>
<OperationalState ID="UIGeneratedOpStateId8c574989e65a4716ba644c45c1bb6d12" MonitorTypeStateID="Good" HealthState="Success"/>
<OperationalState ID="UIGeneratedOpStateId7f3f32f712d546e3bfab79576eca2eb7" MonitorTypeStateID="Warning" HealthState="Warning"/>
<OperationalState ID="UIGeneratedOpStateId0e55b9e6856542118df8882925d7f35c" MonitorTypeStateID="Error" HealthState="Error"/>
</OperationalStates>
<Configuration>
<TypeId>$Target/Property[Type="SCCM!Microsoft.SystemCenter2012.ConfigurationManager.AlertBaseClass"]/TypeId$</TypeId>
<TypeInstanceId>$Target/Property[Type="SCCM!Microsoft.SystemCenter2012.ConfigurationManager.AlertBaseClass"]/TypeInstanceId$</TypeInstanceId>
<IntervalSeconds>900</IntervalSeconds>
<ProviderLocation>$Target/Host/Property[Type="SCCM!Microsoft.SystemCenter2012.ConfigurationManager.SiteServer"]/ProviderLocation$</ProviderLocation>
<SiteCode>$Target/Host/Property[Type="SCCM!Microsoft.SystemCenter2012.ConfigurationManager.Server"]/SiteCode$</SiteCode>
</Configuration>
</UnitMonitor>