| DisplayName | Description | ID | Target | Parent Monitor | Algorithm | Algorithm Parameter | Source Monitor | Relationship | Category | Enabled | Alert Generate | Alert Severity | Alert Priority | Alert Auto Resolve | Remotable | Accessibility |
| Antimalware Definitions | This monitor detects whether there is a valid definitions file. If the definitions file is missing or corrupt, the monitor will enter a Critical state. | Microsoft.FEP.SecurityRootCause.AntimalwareDefinitions.AntimalwareDefinitions.Monitor | Microsoft.FEP.SecurityRootCause.AntimalwareDefinitions | System.Health.SecurityState | WorstOf | | Microsoft.FEP.ProtectedServer.AntimalwareDefinitions.Monitor | Microsoft.FEP.AntimalwareDefinitionsReferencesProtectedServer | Custom | True | False | | | False | True | Public |
| Antimalware Definitions Age | This monitor detects whether the definition file is out of date. If the definition file is older than 3 days, the monitor will enter a Warning state. If the definition is older than 5 days, the monitor will enter a Critical state. | Microsoft.FEP.SecurityRootCause.AntimalwareDefinitions.AntimalwareDefinitionsDate.Monitor | Microsoft.FEP.SecurityRootCause.AntimalwareDefinitions | System.Health.SecurityState | WorstOf | | Microsoft.FEP.ProtectedServer.AntimalwareDefinitionsDate.Monitor | Microsoft.FEP.AntimalwareDefinitionsReferencesProtectedServer | Custom | True | False | | | False | True | Public |
| Antimalware Engine | This monitor tracks the health of the antimalware client and service. | Microsoft.FEP.SecurityRootCause.AntimalwareEngine.AMStatus.Monitor | Microsoft.FEP.SecurityRootCause.AntimalwareEngine | System.Health.SecurityState | WorstOf | | Microsoft.FEP.ProtectedServer.AMStatus.Monitor | Microsoft.FEP.AntimalwareEngineReferencesProtectedServer | Custom | True | False | | | False | True | Public |
| Active Malware | This monitor tracks failed malware cleanup operations. | Microsoft.FEP.SecurityRootCause.MalwareActivity.ActiveMalware.Monitor | Microsoft.FEP.SecurityRootCause.MalwareActivity | System.Health.SecurityState | WorstOf | | Microsoft.FEP.ProtectedServer.ActiveMalware.Monitor | Microsoft.FEP.MalwareActivityReferencesProtectedServer | Custom | True | False | | | False | True | Public |
| Additional Actions Pending | This monitor tracks whether additional actions must be performed after malware has been blocked and removed from a computer. | Microsoft.FEP.SecurityRootCause.MalwareActivity.PendingAdditionalActions.Monitor | Microsoft.FEP.SecurityRootCause.MalwareActivity | System.Health.SecurityState | WorstOf | | Microsoft.FEP.ProtectedServer.PendingAdditionalActions.Monitor | Microsoft.FEP.MalwareActivityReferencesProtectedServer | Custom | True | False | | | False | True | Public |
| Malware Outbreak | This monitor detects a malware outbreak. | Microsoft.FEPS.ProtectedServersWatcher.MalwareOutbreak.Monitor | Microsoft.FEP.ProtectedServersWatcher | System.Health.SecurityState | Percentage | 95 | Microsoft.FEP.SecurityRootCause.MalwareActivity.OutbreakMonitor | Microsoft.FEP.ProtectedServersWatcherContainsMalwareActivity | Custom | True | True | MatchMonitorHealth | High | False | True | Public |