| ID | Type | Isolation | Accessibility | RunAs |
| Security.Monitoring.AuditPol.PowerShell | ProbeActionModuleType | Any | Internal | |
| Security.Monitoring.MultiStringRegistry.PowerShell | ProbeActionModuleType | Any | Internal | |
| Security.Monitoring.SMBv1Connections.PowerShell | ProbeActionModuleType | Any | Internal | |
| SecurityMonitoringMP.GPOMonitoring.ProbeActionModule.GPOCorrelationScript | ProbeActionModuleType | Any | Public | |