Monitor de Deteção de Software Maligno Repetido

Microsoft.SystemCenter2012.ConfigurationManager.RepeatedMalwareDetectionMonitor (UnitMonitor)

Este monitor reencaminha o alerta de deteção de software maligno repetido do Configuration Manager para a consola do Configuration Manager.

Knowledge Base article:

Resumo

O Configuration Manager gera um alerta quando deteta que um tipo de software maligno é detetado repetidamente num dispositivo de uma coleção.

Causas

O Configuration Manager deteta repetidamente o mesmo tipo de software maligno num dispositivo da coleção.

Resoluções

Verifique o dashboard do Endpoint Protection e os relatórios da consola do Configuration Manager para obter informações detalhadas sobre os dispositivos e o software maligno detetado.
Remova o software maligno.

Element properties:

Target

Microsoft.SystemCenter2012.ConfigurationManager.AlertRepeatedMalwareDetection

Parent Monitor

System.Health.ConfigurationState

Category

Custom

Enabled

False

Alert Generate

True

Alert Severity

MatchMonitorHealth

Alert Priority

Normal

Alert Auto Resolve

True

Monitor Type

Microsoft.SystemCenter2012.ConfigurationManager.EPAlertStateMonitor

Remotable

True

Accessibility

Public

Alert Message

Foram detetadas infeções de software maligno repetido

É detetado repetidamente o mesmo tipo de software maligno no mesmo dispositivo da coleção. Verifique a consola do Configuration Manager para obter detalhes.

RunAs

Default

Comment

SIV:FEP0003

Source Code:

<UnitMonitor ID="Microsoft.SystemCenter2012.ConfigurationManager.RepeatedMalwareDetectionMonitor" Comment="SIV:FEP0003" Accessibility="Public" Enabled="false" Target="SCCM!Microsoft.SystemCenter2012.ConfigurationManager.AlertRepeatedMalwareDetection" ParentMonitorID="SystemHealth!System.Health.ConfigurationState" Remotable="true" Priority="Normal" TypeID="Microsoft.SystemCenter2012.ConfigurationManager.EPAlertStateMonitor" ConfirmDelivery="true">

  <Category>Custom</Category>

  <AlertSettings AlertMessage="Microsoft.SystemCenter2012.ConfigurationManager.RepeatedMalwareDetectionMonitor_AlertMessageResourceID">

    <AlertOnState>Warning</AlertOnState>

    <AutoResolve>true</AutoResolve>

    <AlertPriority>Normal</AlertPriority>

    <AlertSeverity>MatchMonitorHealth</AlertSeverity>

  </AlertSettings>

  <OperationalStates>

    <OperationalState ID="UIGeneratedOpStateId21668ad91a804d8da52e10ca5c87e39f" MonitorTypeStateID="Good" HealthState="Success"/>

    <OperationalState ID="UIGeneratedOpStateId10a01dcc0d1847f2b9c256f90448c84d" MonitorTypeStateID="Warning" HealthState="Warning"/>

    <OperationalState ID="UIGeneratedOpStateId8209facd786f4439b243d9b765681ac6" MonitorTypeStateID="Error" HealthState="Error"/>

  </OperationalStates>

  <Configuration>

    <TypeId>$Target/Property[Type="SCCM!Microsoft.SystemCenter2012.ConfigurationManager.AlertBaseClass"]/TypeId$</TypeId>

    <TypeInstanceId>$Target/Property[Type="SCCM!Microsoft.SystemCenter2012.ConfigurationManager.AlertBaseClass"]/TypeInstanceId$</TypeInstanceId>

    <IntervalSeconds>900</IntervalSeconds>

    <ProviderLocation>$Target/Host/Property[Type="SCCM!Microsoft.SystemCenter2012.ConfigurationManager.SiteServer"]/ProviderLocation$</ProviderLocation>

    <SiteCode>$Target/Host/Property[Type="SCCM!Microsoft.SystemCenter2012.ConfigurationManager.Server"]/SiteCode$</SiteCode>

  </Configuration>

</UnitMonitor>