All Rules in Microsoft.AdvancedThreatAnalytics.1_8 Management Pack

 DisplayNameDescriptionIDTargetCategoryEnabledInstance NameCounter NameFrequencyEvent_IDEvent SourceAlert GenerateAlert SeverityAlert PriorityRemotableEvent Log
Microsoft.AdvancedThreatAnalytics.1_8.Center.AbnormalBehaviorSuspiciousActivityOlağandışı Davranış Şüpheli Etkinlik Uyarısı KuralıMicrosoft.AdvancedThreatAnalytics.1_8.Center.AbnormalBehaviorSuspiciousActivityMicrosoft.AdvancedThreatAnalytics.1_8.CenterSecurityHealthFalse00TrueErrorNormalTrueMicrosoft ATA
Microsoft.AdvancedThreatAnalytics.1_8.Center.AbnormalProtocolSuspiciousActivityOlağandışı Protokol Şüpheli Ekinlik Uyarısı KuralıMicrosoft.AdvancedThreatAnalytics.1_8.Center.AbnormalProtocolSuspiciousActivityMicrosoft.AdvancedThreatAnalytics.1_8.CenterSecurityHealthFalse00TrueErrorNormalTrueMicrosoft ATA
Microsoft.AdvancedThreatAnalytics.1_8.Center.AbnormalSensitiveGroupMembershipChangeSuspiciousActivityOlağandışı Hassas Grup Üyeliği Değiştirme Şüpheli Etkinlik Uyarısı KuralıMicrosoft.AdvancedThreatAnalytics.1_8.Center.AbnormalSensitiveGroupMembershipChangeSuspiciousActivityMicrosoft.AdvancedThreatAnalytics.1_8.CenterSecurityHealthFalse00TrueErrorNormalTrueMicrosoft ATA
Microsoft.AdvancedThreatAnalytics.1_8.Center.AbnormalVpnSuspiciousActivityOlağandışı Vpn Şüpheli Ekinlik Uyarı KuralıMicrosoft.AdvancedThreatAnalytics.1_8.Center.AbnormalVpnSuspiciousActivityMicrosoft.AdvancedThreatAnalytics.1_8.CenterSecurityHealthFalse00TrueErrorNormalTrueMicrosoft ATA
Microsoft.AdvancedThreatAnalytics.1_8.Center.AccountEnumerationSuspiciousActivityHesap Numaralandırması Şüpheli Etkinlik Uyarısı KuralıMicrosoft.AdvancedThreatAnalytics.1_8.Center.AccountEnumerationSuspiciousActivityMicrosoft.AdvancedThreatAnalytics.1_8.CenterSecurityHealthFalse00TrueErrorNormalTrueMicrosoft ATA
Microsoft.AdvancedThreatAnalytics.1_8.Center.BruteForceSuspiciousActivityDeneme Yanılma Şüpheli Etkinlik Uyarısı KuralıMicrosoft.AdvancedThreatAnalytics.1_8.Center.BruteForceSuspiciousActivityMicrosoft.AdvancedThreatAnalytics.1_8.CenterSecurityHealthFalse00TrueErrorNormalTrueMicrosoft ATA
Microsoft.AdvancedThreatAnalytics.1_8.Center.CenterDatabaseDataDriveFreeSpaceMonitoringAlertATA 1.8 - Center Veritabanı Veri Sürücüsü Boş Alan İzleme Uyarısına Yönelik Uyarı KuralıMicrosoft.AdvancedThreatAnalytics.1_8.Center.CenterDatabaseDataDriveFreeSpaceMonitoringAlertMicrosoft.AdvancedThreatAnalytics.1_8.CenterAvailabilityHealthTrue00TrueWarningNormalTrueMicrosoft ATA
Microsoft.AdvancedThreatAnalytics.1_8.Center.CenterDatabaseDisconnectedMonitoringAlertATA 1.8 - Center Veritabanı Bağlantısı Kesildi İzleme Uyarısına Yönelik Uyarı KuralıMicrosoft.AdvancedThreatAnalytics.1_8.Center.CenterDatabaseDisconnectedMonitoringAlertMicrosoft.AdvancedThreatAnalytics.1_8.CenterAvailabilityHealthTrue00TrueWarningNormalTrueMicrosoft ATA
Microsoft.AdvancedThreatAnalytics.1_8.Center.CenterExternalIpAddressResolutionFailureMonitoringAlertATA 1.8 - Center Dış Ip Adresi Çözümleme Hatası İzleme Uyarısına Yönelik Uyarı KuralıMicrosoft.AdvancedThreatAnalytics.1_8.Center.CenterExternalIpAddressResolutionFailureMonitoringAlertMicrosoft.AdvancedThreatAnalytics.1_8.CenterAvailabilityHealthTrue00TrueWarningNormalTrueMicrosoft ATA
Microsoft.AdvancedThreatAnalytics.1_8.Center.CenterMailMonitoringAlertATA 1.8 - Center Posta İzleme Uyarısına Yönelik Uyarı KuralıMicrosoft.AdvancedThreatAnalytics.1_8.Center.CenterMailMonitoringAlertMicrosoft.AdvancedThreatAnalytics.1_8.CenterConfigurationHealthTrue00TrueWarningNormalTrueMicrosoft ATA
Microsoft.AdvancedThreatAnalytics.1_8.Center.CenterNotReceivingTrafficMonitoringAlertATA 1.8 - Center Trafik Almıyor İzleme Uyarısına Yönelik Uyarı KuralıMicrosoft.AdvancedThreatAnalytics.1_8.Center.CenterNotReceivingTrafficMonitoringAlertMicrosoft.AdvancedThreatAnalytics.1_8.CenterAvailabilityHealthTrue00TrueWarningNormalTrueMicrosoft ATA
Microsoft.AdvancedThreatAnalytics.1_8.Center.CenterOverloadedMonitoringAlertATA 1.8 - Center Aşırı Yüklendi İzleme Uyarısına Yönelik Uyarı KuralıMicrosoft.AdvancedThreatAnalytics.1_8.Center.CenterOverloadedMonitoringAlertMicrosoft.AdvancedThreatAnalytics.1_8.CenterPerformanceHealthTrue00TrueWarningNormalTrueMicrosoft ATA
Microsoft.AdvancedThreatAnalytics.1_8.Center.CenterSyslogMonitoringAlertATA 1.8 - Center Syslog İzleme Uyarısına Yönelik Uyarı KuralıMicrosoft.AdvancedThreatAnalytics.1_8.Center.CenterSyslogMonitoringAlertMicrosoft.AdvancedThreatAnalytics.1_8.CenterConfigurationHealthTrue00TrueWarningNormalTrueMicrosoft ATA
Microsoft.AdvancedThreatAnalytics.1_8.Center.CertificateExpiryMonitoringAlertATA 1.8 - Sertifika Süresi Dolma İzleme Uyarısına Yönelik Uyarı KuralıMicrosoft.AdvancedThreatAnalytics.1_8.Center.CertificateExpiryMonitoringAlertMicrosoft.AdvancedThreatAnalytics.1_8.CenterConfigurationHealthTrue00TrueWarningNormalTrueMicrosoft ATA
Microsoft.AdvancedThreatAnalytics.1_8.Center.ComputerPreauthenticationFailedSuspiciousActivityBilgisayar Ön Kimlik Doğrulaması Başarısız Oldu Şüpheli Etkinlik Uyarısı KuralıMicrosoft.AdvancedThreatAnalytics.1_8.Center.ComputerPreauthenticationFailedSuspiciousActivityMicrosoft.AdvancedThreatAnalytics.1_8.CenterSecurityHealthFalse00TrueErrorNormalTrueMicrosoft ATA
Microsoft.AdvancedThreatAnalytics.1_8.Center.DatabaseAtSvcBlockSizeVeritabanı AtSVC Blok Boyutu1.8Microsoft.AdvancedThreatAnalytics.1_8.Center.DatabaseAtSvcBlockSizeMicrosoft.AdvancedThreatAnalytics.1_8.CenterPerformanceCollectionTrueMicrosoft ATA CenterDatabase AtSVC Block Size3000FalseTrue
Microsoft.AdvancedThreatAnalytics.1_8.Center.DatabaseDirectoryServicesActivityBlockSizeVeritabanı DirectoryServicesActivity Blok Boyutu1.8Microsoft.AdvancedThreatAnalytics.1_8.Center.DatabaseDirectoryServicesActivityBlockSizeMicrosoft.AdvancedThreatAnalytics.1_8.CenterPerformanceCollectionTrueMicrosoft ATA CenterDatabase DirectoryServicesActivity Block Size3000FalseTrue
Microsoft.AdvancedThreatAnalytics.1_8.Center.DatabaseDnsBlockSizeVeritabanı DNS Blok Boyutu1.8Microsoft.AdvancedThreatAnalytics.1_8.Center.DatabaseDnsBlockSizeMicrosoft.AdvancedThreatAnalytics.1_8.CenterPerformanceCollectionTrueMicrosoft ATA CenterDatabase DNS Block Size3000FalseTrue
Microsoft.AdvancedThreatAnalytics.1_8.Center.DatabaseDrsrBlockSizeVeritabanı DRSR Blok Boyutu1.8Microsoft.AdvancedThreatAnalytics.1_8.Center.DatabaseDrsrBlockSizeMicrosoft.AdvancedThreatAnalytics.1_8.CenterPerformanceCollectionTrueMicrosoft ATA CenterDatabase DRSR Block Size3000FalseTrue
Microsoft.AdvancedThreatAnalytics.1_8.Center.DatabaseKerberosApBlockSizeVeritabanı KerberosAP Blok Boyutu1.8Microsoft.AdvancedThreatAnalytics.1_8.Center.DatabaseKerberosApBlockSizeMicrosoft.AdvancedThreatAnalytics.1_8.CenterPerformanceCollectionTrueMicrosoft ATA CenterDatabase KerberosAP Block Size3000FalseTrue
Microsoft.AdvancedThreatAnalytics.1_8.Center.DatabaseKerberosAsBlockSizeVeritabanı KerberosAS Blok Boyutu1.8Microsoft.AdvancedThreatAnalytics.1_8.Center.DatabaseKerberosAsBlockSizeMicrosoft.AdvancedThreatAnalytics.1_8.CenterPerformanceCollectionTrueMicrosoft ATA CenterDatabase KerberosAS Block Size3000FalseTrue
Microsoft.AdvancedThreatAnalytics.1_8.Center.DatabaseKerberosTgsBlockSizeVeritabanı KerberosTGS Blok Boyutu1.8Microsoft.AdvancedThreatAnalytics.1_8.Center.DatabaseKerberosTgsBlockSizeMicrosoft.AdvancedThreatAnalytics.1_8.CenterPerformanceCollectionTrueMicrosoft ATA CenterDatabase KerberosTGS Block Size3000FalseTrue
Microsoft.AdvancedThreatAnalytics.1_8.Center.DatabaseLdapBlockSizeVeritabanı LDAP Blok Boyutu1.8Microsoft.AdvancedThreatAnalytics.1_8.Center.DatabaseLdapBlockSizeMicrosoft.AdvancedThreatAnalytics.1_8.CenterPerformanceCollectionTrueMicrosoft ATA CenterDatabase LDAP Block Size3000FalseTrue
Microsoft.AdvancedThreatAnalytics.1_8.Center.DatabaseLsaRpcBlockSizeVeritabanı LsaRPC Blok Boyutu1.8Microsoft.AdvancedThreatAnalytics.1_8.Center.DatabaseLsaRpcBlockSizeMicrosoft.AdvancedThreatAnalytics.1_8.CenterPerformanceCollectionTrueMicrosoft ATA CenterDatabase LsaRPC Block Size3000FalseTrue
Microsoft.AdvancedThreatAnalytics.1_8.Center.DatabaseNetlogonBlockSizeVeritabanı Netlogon Blok Boyutu1.8Microsoft.AdvancedThreatAnalytics.1_8.Center.DatabaseNetlogonBlockSizeMicrosoft.AdvancedThreatAnalytics.1_8.CenterPerformanceCollectionTrueMicrosoft ATA CenterDatabase Netlogon Block Size3000FalseTrue
Microsoft.AdvancedThreatAnalytics.1_8.Center.DatabaseNtlmBlockSizeVeritabanı NTLM Blok Boyutu1.8Microsoft.AdvancedThreatAnalytics.1_8.Center.DatabaseNtlmBlockSizeMicrosoft.AdvancedThreatAnalytics.1_8.CenterPerformanceCollectionTrueMicrosoft ATA CenterDatabase NTLM Block Size3000FalseTrue
Microsoft.AdvancedThreatAnalytics.1_8.Center.DatabaseNtlmEventBlockSizeVeritabanı NTLMEvent Blok Boyutu1.8Microsoft.AdvancedThreatAnalytics.1_8.Center.DatabaseNtlmEventBlockSizeMicrosoft.AdvancedThreatAnalytics.1_8.CenterPerformanceCollectionTrueMicrosoft ATA CenterDatabase NTLMEvent Block Size3000FalseTrue
Microsoft.AdvancedThreatAnalytics.1_8.Center.DatabaseServiceControlBlockSizeVeritabanı ServiceControl Blok Boyutu1.8Microsoft.AdvancedThreatAnalytics.1_8.Center.DatabaseServiceControlBlockSizeMicrosoft.AdvancedThreatAnalytics.1_8.CenterPerformanceCollectionTrueMicrosoft ATA CenterDatabase ServiceControl Block Size3000FalseTrue
Microsoft.AdvancedThreatAnalytics.1_8.Center.DatabaseSmbBlockSizeVeritabanı SMB Blok Boyutu1.8Microsoft.AdvancedThreatAnalytics.1_8.Center.DatabaseSmbBlockSizeMicrosoft.AdvancedThreatAnalytics.1_8.CenterPerformanceCollectionTrueMicrosoft ATA CenterDatabase SMB Block Size3000FalseTrue
Microsoft.AdvancedThreatAnalytics.1_8.Center.DatabaseSrvSvcBlockSizeVeritabanı SrvSVC Blok Boyutu1.8Microsoft.AdvancedThreatAnalytics.1_8.Center.DatabaseSrvSvcBlockSizeMicrosoft.AdvancedThreatAnalytics.1_8.CenterPerformanceCollectionTrueMicrosoft ATA CenterDatabase SrvSVC Block Size3000FalseTrue
Microsoft.AdvancedThreatAnalytics.1_8.Center.DatabaseTaskSchedulerBlockSizeVeritabanı TaskScheduler Blok Boyutu1.8Microsoft.AdvancedThreatAnalytics.1_8.Center.DatabaseTaskSchedulerBlockSizeMicrosoft.AdvancedThreatAnalytics.1_8.CenterPerformanceCollectionTrueMicrosoft ATA CenterDatabase TaskScheduler Block Size3000FalseTrue
Microsoft.AdvancedThreatAnalytics.1_8.Center.DirectoryServicesReplicationSuspiciousActivityDizin Hizmetleri Çoğaltması Şüpheli Etkinlik Uyarısı KuralıMicrosoft.AdvancedThreatAnalytics.1_8.Center.DirectoryServicesReplicationSuspiciousActivityMicrosoft.AdvancedThreatAnalytics.1_8.CenterSecurityHealthFalse00TrueErrorNormalTrueMicrosoft ATA
Microsoft.AdvancedThreatAnalytics.1_8.Center.DnsReconnaissanceSuspiciousActivityDNS Keşfi Şüpheli Etkinlik Uyarısı KuralıMicrosoft.AdvancedThreatAnalytics.1_8.Center.DnsReconnaissanceSuspiciousActivityMicrosoft.AdvancedThreatAnalytics.1_8.CenterSecurityHealthFalse00TrueErrorNormalTrueMicrosoft ATA
Microsoft.AdvancedThreatAnalytics.1_8.Center.EncryptionDowngradeSuspiciousActivityŞifreleme Düşürme Şüpheli Etkinlik Uyarısı KuralıMicrosoft.AdvancedThreatAnalytics.1_8.Center.EncryptionDowngradeSuspiciousActivityMicrosoft.AdvancedThreatAnalytics.1_8.CenterSecurityHealthFalse00TrueErrorNormalTrueMicrosoft ATA
Microsoft.AdvancedThreatAnalytics.1_8.Center.EntityProfilerNetworkActivityBlockSizeEntityProfiler Ağ Etkinliği Blok Boyutu1.8Microsoft.AdvancedThreatAnalytics.1_8.Center.EntityProfilerNetworkActivityBlockSizeMicrosoft.AdvancedThreatAnalytics.1_8.CenterPerformanceCollectionTrueMicrosoft ATA CenterEntityProfiler Network Activity Block Size3000FalseTrue
Microsoft.AdvancedThreatAnalytics.1_8.Center.EntityReceiverEntityBatchBlockSizeEntityReceiver Varlık Toplu İşi Blok Boyutu1.8Microsoft.AdvancedThreatAnalytics.1_8.Center.EntityReceiverEntityBatchBlockSizeMicrosoft.AdvancedThreatAnalytics.1_8.CenterPerformanceCollectionTrueMicrosoft ATA CenterEntityReceiver Entity Batch Block Size3000FalseTrue
Microsoft.AdvancedThreatAnalytics.1_8.Center.EnumerateSessionsSuspiciousActivityŞifreleme Düşürme Şüpheli Etkinliği (Altın Bilet) Uyarısı KuralıMicrosoft.AdvancedThreatAnalytics.1_8.Center.EnumerateSessionsSuspiciousActivityMicrosoft.AdvancedThreatAnalytics.1_8.CenterSecurityHealthFalse00TrueErrorNormalTrueMicrosoft ATA
Microsoft.AdvancedThreatAnalytics.1_8.Center.ForgedPacSuspiciousActivityŞifreleme Düşürme Şüpheli Etkinliği (Karmayı Geçirme) Uyarısı KuralıMicrosoft.AdvancedThreatAnalytics.1_8.Center.ForgedPacSuspiciousActivityMicrosoft.AdvancedThreatAnalytics.1_8.CenterSecurityHealthFalse00TrueErrorNormalTrueMicrosoft ATA
Microsoft.AdvancedThreatAnalytics.1_8.Center.GatewayCaptureNetworkAdapterFaultedMonitoringAlertATA 1.8 - Gateway Yakalama Ağ Bağdaştırıcısı Arızalı İzleme Uyarısına Yönelik Uyarı KuralıMicrosoft.AdvancedThreatAnalytics.1_8.Center.GatewayCaptureNetworkAdapterFaultedMonitoringAlertMicrosoft.AdvancedThreatAnalytics.1_8.CenterAvailabilityHealthTrue00TrueWarningNormalTrueMicrosoft ATA
Microsoft.AdvancedThreatAnalytics.1_8.Center.GatewayCaptureNetworkAdapterMissingMonitoringAlertATA 1.8 - Gateway Yakalama Ağ Bağdaştırıcısı Eksik İzleme Uyarısına Yönelik Uyarı KuralıMicrosoft.AdvancedThreatAnalytics.1_8.Center.GatewayCaptureNetworkAdapterMissingMonitoringAlertMicrosoft.AdvancedThreatAnalytics.1_8.CenterConfigurationHealthTrue00TrueWarningNormalTrueMicrosoft ATA
Microsoft.AdvancedThreatAnalytics.1_8.Center.GatewayDirectoryServicesClientAccountPasswordExpiryMonitoringAlertATA 1.8 - Gateway Dizin Hizmetleri İstemci Hesabı Parolası Süre Dolmayı İzleme Uyarısına Yönelik Uyarı KuralıMicrosoft.AdvancedThreatAnalytics.1_8.Center.GatewayDirectoryServicesClientAccountPasswordExpiryMonitoringAlertMicrosoft.AdvancedThreatAnalytics.1_8.CenterConfigurationHealthTrue00TrueWarningNormalTrueMicrosoft ATA
Microsoft.AdvancedThreatAnalytics.1_8.Center.GatewayDirectoryServicesClientConnectivityMonitoringAlertATA 1.8 - Gateway Dizin Hizmetleri İstemci Bağlantı İzleme Uyarısına Yönelik Uyarı KuralıMicrosoft.AdvancedThreatAnalytics.1_8.Center.GatewayDirectoryServicesClientConnectivityMonitoringAlertMicrosoft.AdvancedThreatAnalytics.1_8.CenterAvailabilityHealthTrue00TrueWarningNormalTrueMicrosoft ATA
Microsoft.AdvancedThreatAnalytics.1_8.Center.GatewayDisconnectedMonitoringAlertATA 1.8 - Gateway Bağlantısı Kesildi İzleme Uyarısına Yönelik Uyarı KuralıMicrosoft.AdvancedThreatAnalytics.1_8.Center.GatewayDisconnectedMonitoringAlertMicrosoft.AdvancedThreatAnalytics.1_8.CenterAvailabilityHealthTrue00TrueWarningNormalTrueMicrosoft ATA
Microsoft.AdvancedThreatAnalytics.1_8.Center.GatewayDomainSynchronizerNotAssignedMonitoringAlertATA 1.8 - Gateway Etki Alanı Eşitleyicisi Atanmadı İzleme Uyarısına Yönelik Uyarı KuralıMicrosoft.AdvancedThreatAnalytics.1_8.Center.GatewayDomainSynchronizerNotAssignedMonitoringAlertMicrosoft.AdvancedThreatAnalytics.1_8.CenterConfigurationHealthTrue00TrueWarningNormalTrueMicrosoft ATA
Microsoft.AdvancedThreatAnalytics.1_8.Center.GatewayLowMemoryMonitoringAlertATA 1.8 - Gateway Düşük Bellek İzleme Uyarısına Yönelik Uyarı KuralıMicrosoft.AdvancedThreatAnalytics.1_8.Center.GatewayLowMemoryMonitoringAlertMicrosoft.AdvancedThreatAnalytics.1_8.CenterPerformanceHealthTrue00TrueWarningNormalTrueMicrosoft ATA
Microsoft.AdvancedThreatAnalytics.1_8.Center.GatewayOverloadedEventActivitiesMonitoringAlertATA 1.8 - Gateway Aşırı Yüklenen Olay Etkinlikleri İzleme Uyarısına Yönelik Uyarı KuralıMicrosoft.AdvancedThreatAnalytics.1_8.Center.GatewayOverloadedEventActivitiesMonitoringAlertMicrosoft.AdvancedThreatAnalytics.1_8.CenterPerformanceHealthTrue00TrueWarningNormalTrueMicrosoft ATA
Microsoft.AdvancedThreatAnalytics.1_8.Center.GatewayOverloadedNetworkActivitiesMonitoringAlertATA 1.8 - Gateway Aşırı Yüklenen Ağ Etkinlikleri İzleme Uyarısına Yönelik Uyarı KuralıMicrosoft.AdvancedThreatAnalytics.1_8.Center.GatewayOverloadedNetworkActivitiesMonitoringAlertMicrosoft.AdvancedThreatAnalytics.1_8.CenterPerformanceHealthTrue00TrueWarningNormalTrueMicrosoft ATA
Microsoft.AdvancedThreatAnalytics.1_8.Center.GatewayRadiusEventListenerMonitoringAlertATA 1.8 - Gateway Radius Olay Dinleyicisi İzleme Uyarısına Yönelik Uyarı KuralıMicrosoft.AdvancedThreatAnalytics.1_8.Center.GatewayRadiusEventListenerMonitoringAlertMicrosoft.AdvancedThreatAnalytics.1_8.CenterAvailabilityHealthTrue00TrueWarningNormalTrueMicrosoft ATA
Microsoft.AdvancedThreatAnalytics.1_8.Center.GatewaysOutdatedMonitoringAlertATA 1.8 - Gateway'ler Eski İzleme Uyarısına Yönelik Uyarı KuralıMicrosoft.AdvancedThreatAnalytics.1_8.Center.GatewaysOutdatedMonitoringAlertMicrosoft.AdvancedThreatAnalytics.1_8.CenterConfigurationHealthTrue00TrueWarningNormalTrueMicrosoft ATA
Microsoft.AdvancedThreatAnalytics.1_8.Center.GatewayStartFailureMonitoringAlertATA 1.8 - Gateway Başlama Hatası İzleme Uyarısına Yönelik Uyarı KuralıMicrosoft.AdvancedThreatAnalytics.1_8.Center.GatewayStartFailureMonitoringAlertMicrosoft.AdvancedThreatAnalytics.1_8.CenterAvailabilityHealthTrue00TrueWarningNormalTrueMicrosoft ATA
Microsoft.AdvancedThreatAnalytics.1_8.Center.GatewaySyslogEventListenerMonitoringAlertATA 1.8 - Gateway Syslog Olay Dinleyicisi İzleme Uyarısına Yönelik Uyarı KuralıMicrosoft.AdvancedThreatAnalytics.1_8.Center.GatewaySyslogEventListenerMonitoringAlertMicrosoft.AdvancedThreatAnalytics.1_8.CenterAvailabilityHealthTrue00TrueWarningNormalTrueMicrosoft ATA
Microsoft.AdvancedThreatAnalytics.1_8.Center.GoldenTicketSuspiciousActivityŞifreleme Düşürme Şüpheli Etkinliği (İskelet Anahtar) Uyarısı KuralıMicrosoft.AdvancedThreatAnalytics.1_8.Center.GoldenTicketSuspiciousActivityMicrosoft.AdvancedThreatAnalytics.1_8.CenterSecurityHealthFalse00TrueErrorNormalTrueMicrosoft ATA
Microsoft.AdvancedThreatAnalytics.1_8.Center.HoneytokenActivitySuspiciousActivityOturumları Listeleme Şüpheli Etkinlik Uyarısı KuralıMicrosoft.AdvancedThreatAnalytics.1_8.Center.HoneytokenActivitySuspiciousActivityMicrosoft.AdvancedThreatAnalytics.1_8.CenterSecurityHealthFalse00TrueErrorNormalTrueMicrosoft ATA
Microsoft.AdvancedThreatAnalytics.1_8.Center.LdapBruteForceSuspiciousActivitySahte Pac Şüpheli Etkinlik Uyarısı KuralıMicrosoft.AdvancedThreatAnalytics.1_8.Center.LdapBruteForceSuspiciousActivityMicrosoft.AdvancedThreatAnalytics.1_8.CenterSecurityHealthFalse00TrueErrorNormalTrueMicrosoft ATA
Microsoft.AdvancedThreatAnalytics.1_8.Center.LdapCleartextPasswordSuspiciousActivityHoneytoken Etkinliği Şüpheli Etkinlik Uyarısı KuralıMicrosoft.AdvancedThreatAnalytics.1_8.Center.LdapCleartextPasswordSuspiciousActivityMicrosoft.AdvancedThreatAnalytics.1_8.CenterSecurityHealthFalse00TrueErrorNormalTrueMicrosoft ATA
Microsoft.AdvancedThreatAnalytics.1_8.Center.MassiveObjectDeletionSuspiciousActivityLDAP Basit Bağlama Düz Metin Parolası Şüpheli Etkinlik Uyarısı KuralıMicrosoft.AdvancedThreatAnalytics.1_8.Center.MassiveObjectDeletionSuspiciousActivityMicrosoft.AdvancedThreatAnalytics.1_8.CenterSecurityHealthFalse00TrueErrorNormalTrueMicrosoft ATA
Microsoft.AdvancedThreatAnalytics.1_8.Center.NetworkActivityProcessorNetworkActivityBlockSizeNetworkActivityProcessor Ağ Etkinliği Blok Boyutu1.8Microsoft.AdvancedThreatAnalytics.1_8.Center.NetworkActivityProcessorNetworkActivityBlockSizeMicrosoft.AdvancedThreatAnalytics.1_8.CenterPerformanceCollectionTrueMicrosoft ATA CenterNetworkActivityProcessor Network Activity Block Size3000FalseTrue
Microsoft.AdvancedThreatAnalytics.1_8.Center.PassTheHashSuspiciousActivityÇok Sayıda Nesne Silme Şüpheli Etkinlik Uyarısı KuralıMicrosoft.AdvancedThreatAnalytics.1_8.Center.PassTheHashSuspiciousActivityMicrosoft.AdvancedThreatAnalytics.1_8.CenterSecurityHealthFalse00TrueErrorNormalTrueMicrosoft ATA
Microsoft.AdvancedThreatAnalytics.1_8.Center.PassTheTicketSuspiciousActivityKarmayı Geçirme Şüpheli Etkinlik Uyarısı KuralıMicrosoft.AdvancedThreatAnalytics.1_8.Center.PassTheTicketSuspiciousActivityMicrosoft.AdvancedThreatAnalytics.1_8.CenterSecurityHealthFalse00TrueErrorNormalTrueMicrosoft ATA
Microsoft.AdvancedThreatAnalytics.1_8.Center.RemoteExecutionSuspiciousActivityAnahtarı Geçirme Şüpheli Etkinlik Uyarısı KuralıMicrosoft.AdvancedThreatAnalytics.1_8.Center.RemoteExecutionSuspiciousActivityMicrosoft.AdvancedThreatAnalytics.1_8.CenterSecurityHealthFalse00TrueErrorNormalTrueMicrosoft ATA
Microsoft.AdvancedThreatAnalytics.1_8.Center.RetrieveDataProtectionBackupKeySuspiciousActivityUzaktan Yürütme Şüpheli Etkinlik Uyarısı KuralıMicrosoft.AdvancedThreatAnalytics.1_8.Center.RetrieveDataProtectionBackupKeySuspiciousActivityMicrosoft.AdvancedThreatAnalytics.1_8.CenterSecurityHealthFalse00TrueErrorNormalTrueMicrosoft ATA
Microsoft.AdvancedThreatAnalytics.1_8.Center.SamrReconnaissanceSuspiciousActivityVeri Koruma Yedek Anahtarını Alma Şüpheli Etkinlik Uyarısı KuralıMicrosoft.AdvancedThreatAnalytics.1_8.Center.SamrReconnaissanceSuspiciousActivityMicrosoft.AdvancedThreatAnalytics.1_8.CenterSecurityHealthFalse00TrueErrorNormalTrueMicrosoft ATA
Microsoft.AdvancedThreatAnalytics.1_8.Gateway.ActiveDirectoryAuthenticationFailureATA Gateway, Etki Alanı Denetleyicisinde Kimliği DoğrulayamadıMicrosoft ATA 1.8 Gateway'i izlemeye yönelik kural - ATA Gateway, Etki Alanı Denetleyicisinde Kimliği DoğrulayamadıMicrosoft.AdvancedThreatAnalytics.1_8.Gateway.ActiveDirectoryAuthenticationFailureMicrosoft.AdvancedThreatAnalytics.1_8.GatewayAvailabilityHealthTrue00TrueErrorNormalTrue
Microsoft.AdvancedThreatAnalytics.1_8.Gateway.CountersDisabledKayıt defterinde sayaçlar devre dışı bırakılmış olabilirMicrosoft ATA 1.8 Gateway'i izlemeye yönelik kural - Kayıt defterinde sayaçlar devre dışı bırakılmış olabilirMicrosoft.AdvancedThreatAnalytics.1_8.Gateway.CountersDisabledMicrosoft.AdvancedThreatAnalytics.1_8.GatewayAvailabilityHealthTrue00TrueErrorNormalTrue
Microsoft.AdvancedThreatAnalytics.1_8.Gateway.EntityResolverActivityBlockSizeEntityResolver Etkinlik Blok Boyutu1.8Microsoft.AdvancedThreatAnalytics.1_8.Gateway.EntityResolverActivityBlockSizeMicrosoft.AdvancedThreatAnalytics.1_8.GatewayPerformanceCollectionTrueMicrosoft ATA GatewayEntityResolver Activity Block Size3000FalseTrue
Microsoft.AdvancedThreatAnalytics.1_8.Gateway.EntitySenderEntityBatchBlockSizeEntitySender Varlık Toplu İşi Blok Boyutu1.8Microsoft.AdvancedThreatAnalytics.1_8.Gateway.EntitySenderEntityBatchBlockSizeMicrosoft.AdvancedThreatAnalytics.1_8.GatewayPerformanceCollectionTrueMicrosoft ATA GatewayEntitySender Entity Batch Block Size3000FalseTrue
Microsoft.AdvancedThreatAnalytics.1_8.Gateway.EntitySenderEntityBatchSendTimeEntitySender Varlık Toplu İşi Gönderme Zamanı1.8Microsoft.AdvancedThreatAnalytics.1_8.Gateway.EntitySenderEntityBatchSendTimeMicrosoft.AdvancedThreatAnalytics.1_8.GatewayPerformanceCollectionTrueMicrosoft ATA GatewayEntitySender Entity Batch Send Time3000FalseTrue
Microsoft.AdvancedThreatAnalytics.1_8.Gateway.FailedToAuthenticateAgainstCenterATA Gateway, Center'da Kimliği DoğrulayamadıMicrosoft ATA 1.8 Gateway'i izlemeye yönelik kural - ATA Gateway, Center'da Kimliği DoğrulayamadıMicrosoft.AdvancedThreatAnalytics.1_8.Gateway.FailedToAuthenticateAgainstCenterMicrosoft.AdvancedThreatAnalytics.1_8.GatewayAvailabilityHealthTrue00TrueErrorNormalTrue
Microsoft.AdvancedThreatAnalytics.1_8.Gateway.FailedToEstablishConnectionToCenterATA Gateway, ATA Center ile bağlantı kuramadıMicrosoft ATA 1.8 Gateway'i izlemeye yönelik kural - ATA Gateway, ATA Center ile bağlantı kuramadıMicrosoft.AdvancedThreatAnalytics.1_8.Gateway.FailedToEstablishConnectionToCenterMicrosoft.AdvancedThreatAnalytics.1_8.GatewayAvailabilityHealthTrue00TrueErrorNormalTrue
Microsoft.AdvancedThreatAnalytics.1_8.Gateway.FailedToParseSyslogATA Gateway, SIEM Syslog İletisini AyrıştıramadıMicrosoft ATA 1.8 Gateway'i izlemeye yönelik kural - ATA Gateway, SIEM Syslog İletisini AyrıştıramadıMicrosoft.AdvancedThreatAnalytics.1_8.Gateway.FailedToParseSyslogMicrosoft.AdvancedThreatAnalytics.1_8.GatewayAvailabilityHealthTrue00TrueErrorNormalTrue
Microsoft.AdvancedThreatAnalytics.1_8.Gateway.FailedToQueryDCUsingLDAPProtocolATA Gateway, LDAP protokolünü kullanarak etki alanı denetleyicisini sorgulayamadıMicrosoft ATA 1.8 Gateway'i izlemeye yönelik kural - ATA Gateway, LDAP protokolünü kullanarak etki alanı denetleyicisini sorgulayamadıMicrosoft.AdvancedThreatAnalytics.1_8.Gateway.FailedToQueryDCUsingLDAPProtocolMicrosoft.AdvancedThreatAnalytics.1_8.GatewayAvailabilityHealthTrue00TrueErrorNormalTrue
Microsoft.AdvancedThreatAnalytics.1_8.Gateway.FailedToSynchronizeConfigurationFromCenterATA Gateway, ATA Center'dan yapılandırmayı eşitleyemediMicrosoft ATA 1.8 Gateway'i izlemeye yönelik kural - ATA Gateway, ATA Center'dan yapılandırmayı eşitleyemediMicrosoft.AdvancedThreatAnalytics.1_8.Gateway.FailedToSynchronizeConfigurationFromCenterMicrosoft.AdvancedThreatAnalytics.1_8.GatewayAvailabilityHealthTrue00TrueErrorNormalTrue
Microsoft.AdvancedThreatAnalytics.1_8.Gateway.FailedToValidateCenterCertificateChainATA Gateway, Center Sertifika Zincirini DoğrulayamadıMicrosoft ATA 1.8 Gateway'i izlemeye yönelik kural - ATA Gateway, Center Sertifika Zincirini DoğrulayamadıMicrosoft.AdvancedThreatAnalytics.1_8.Gateway.FailedToValidateCenterCertificateChainMicrosoft.AdvancedThreatAnalytics.1_8.GatewayAvailabilityHealthTrue00TrueErrorNormalTrue
Microsoft.AdvancedThreatAnalytics.1_8.Gateway.GatewayDoesNotHaveEnoughMemoryATA Gateway yeterli belleğe sahip değilMicrosoft ATA 1.8 Gateway'i izlemeye yönelik kural - ATA Gateway yeterli belleğe sahip değilMicrosoft.AdvancedThreatAnalytics.1_8.Gateway.GatewayDoesNotHaveEnoughMemoryMicrosoft.AdvancedThreatAnalytics.1_8.GatewayAvailabilityHealthTrue00TrueErrorNormalTrue
Microsoft.AdvancedThreatAnalytics.1_8.Gateway.GatewayUpdaterResourceManagerCommitMemoryMaxSizeGatewayUpdaterResourceManager En Fazla Kaydedilmiş Bellek Boyutu1.8Microsoft.AdvancedThreatAnalytics.1_8.Gateway.GatewayUpdaterResourceManagerCommitMemoryMaxSizeMicrosoft.AdvancedThreatAnalytics.1_8.GatewayPerformanceCollectionTrueMicrosoft ATA Gateway UpdaterGatewayUpdaterResourceManager Commit Memory Max Size3000FalseTrue
Microsoft.AdvancedThreatAnalytics.1_8.Gateway.GatewayUpdaterResourceManagerCPUTimeMax_GatewayUpdaterResourceManager CPU Süresi En Fazla \%1.8Microsoft.AdvancedThreatAnalytics.1_8.Gateway.GatewayUpdaterResourceManagerCPUTimeMax_Microsoft.AdvancedThreatAnalytics.1_8.GatewayPerformanceCollectionTrueMicrosoft ATA Gateway UpdaterGatewayUpdaterResourceManager CPU Time Max \%3000FalseTrue
Microsoft.AdvancedThreatAnalytics.1_8.Gateway.GatewayUpdaterResourceManagerWorkingSetLimitSizeGatewayUpdaterResourceManager Çalışma Kümesi Sınır Boyutu1.8Microsoft.AdvancedThreatAnalytics.1_8.Gateway.GatewayUpdaterResourceManagerWorkingSetLimitSizeMicrosoft.AdvancedThreatAnalytics.1_8.GatewayPerformanceCollectionTrueMicrosoft ATA Gateway UpdaterGatewayUpdaterResourceManager Working Set Limit Size3000FalseTrue
Microsoft.AdvancedThreatAnalytics.1_8.Gateway.HostEntryInHOSTSFileHOSTS dosyasında makinenin kısa adını gösteren bir konak girdisi varATA 1.8 Gateway'i izlemeye yönelik kural - HOSTS dosyasında makinenin kısa adını gösteren bir konak girişi varMicrosoft.AdvancedThreatAnalytics.1_8.Gateway.HostEntryInHOSTSFileMicrosoft.AdvancedThreatAnalytics.1_8.GatewayAvailabilityHealthTrue00TrueErrorNormalTrue
Microsoft.AdvancedThreatAnalytics.1_8.Gateway.MessageAnalyzerIsInstalledOnGatewayİleti Çözümleyicisi, ATA Gateway'de yüklüMicrosoft ATA 1.8 Gateway'i izlemeye yönelik kural - İleti Çözümleyicisi, ATA Gateway'de yüklüMicrosoft.AdvancedThreatAnalytics.1_8.Gateway.MessageAnalyzerIsInstalledOnGatewayMicrosoft.AdvancedThreatAnalytics.1_8.GatewayAvailabilityHealthTrue00TrueErrorNormalTrue
Microsoft.AdvancedThreatAnalytics.1_8.Gateway.NetworkActivityTranslatorMessageData0BlockSizeNetworkActivityTranslator İleti Verileri 0 Blok Boyutu1.8Microsoft.AdvancedThreatAnalytics.1_8.Gateway.NetworkActivityTranslatorMessageData0BlockSizeMicrosoft.AdvancedThreatAnalytics.1_8.GatewayPerformanceCollectionTrueMicrosoft ATA GatewayNetworkActivityTranslator Message Data 0 Block Size3000FalseTrue
Microsoft.AdvancedThreatAnalytics.1_8.Gateway.NetworkListenerETWDroppedEvents_SecNetworkListener ETW Tarafından Bırakılan Olaylar/Sn1.8Microsoft.AdvancedThreatAnalytics.1_8.Gateway.NetworkListenerETWDroppedEvents_SecMicrosoft.AdvancedThreatAnalytics.1_8.GatewayPerformanceCollectionTrueMicrosoft ATA GatewayNetworkListener ETW Dropped Events/Sec3000FalseTrue
Microsoft.AdvancedThreatAnalytics.1_8.Gateway.NetworkListenerPEFDroppedEvents_SecNetworkListener PEF Tarafından Bırakılan Olaylar/Sn1.8Microsoft.AdvancedThreatAnalytics.1_8.Gateway.NetworkListenerPEFDroppedEvents_SecMicrosoft.AdvancedThreatAnalytics.1_8.GatewayPerformanceCollectionTrueMicrosoft ATA GatewayNetworkListener PEF Dropped Events/Sec3000FalseTrue
Microsoft.AdvancedThreatAnalytics.1_8.Gateway.NetworkListenerPEFParsedMessages_SecNetworkListener PEF Tarafından Ayrıştırılan İletiler/Sn1.8Microsoft.AdvancedThreatAnalytics.1_8.Gateway.NetworkListenerPEFParsedMessages_SecMicrosoft.AdvancedThreatAnalytics.1_8.GatewayPerformanceCollectionTrueMicrosoft ATA GatewayNetworkListener PEF Parsed Messages/Sec3000FalseTrue
Microsoft.AdvancedThreatAnalytics.1_8.Gateway.OtherPendingInstallationsBilgisayarınızda bekleyen başka yüklemeler varMicrosoft ATA 1.8 Gateway'i izlemeye yönelik kural - Bilgisayarınızda bekleyen başka yüklemeler varMicrosoft.AdvancedThreatAnalytics.1_8.Gateway.OtherPendingInstallationsMicrosoft.AdvancedThreatAnalytics.1_8.GatewayAvailabilityHealthTrue00TrueErrorNormalTrue
Microsoft.AdvancedThreatAnalytics.1_8.Gateway.PEFWasNotInstalledCorrectlyPEF (İleti Çözümleyicisi) doğru şekilde yüklenmediMicrosoft ATA 1.8 Gateway'i izlemeye yönelik kural - PEF (İleti Çözümleyicisi) doğru şekilde yüklenmediMicrosoft.AdvancedThreatAnalytics.1_8.Gateway.PEFWasNotInstalledCorrectlyMicrosoft.AdvancedThreatAnalytics.1_8.GatewayAvailabilityHealthTrue00TrueErrorNormalTrue
Microsoft.AdvancedThreatAnalytics.1_8.Gateway.PIDsWasEnabledForProcessNamesInGatewayATA Gateway'de işlem adları için PID'ler etkinleştirildiMicrosoft ATA 1.8 Gateway'i izlemeye yönelik kural - ATA Gateway'de işlem adları için PID'ler etkinleştirildiMicrosoft.AdvancedThreatAnalytics.1_8.Gateway.PIDsWasEnabledForProcessNamesInGatewayMicrosoft.AdvancedThreatAnalytics.1_8.GatewayAvailabilityHealthTrue00TrueErrorNormalTrue
Microsoft.AdvancedThreatAnalytics.1_8.Center.EncryptionDowngradeGoldenTicketSuspiciousActivityMicrosoft.AdvancedThreatAnalytics.1_8.Center.EncryptionDowngradeGoldenTicketSuspiciousActivityMicrosoft.AdvancedThreatAnalytics.1_8.Center.EncryptionDowngradeGoldenTicketSuspiciousActivityMicrosoft.AdvancedThreatAnalytics.1_8.CenterSecurityHealthFalse00TrueErrorNormalTrueMicrosoft ATA
Microsoft.AdvancedThreatAnalytics.1_8.Center.EncryptionDowngradeOverPasstheHashSuspiciousActivityMicrosoft.AdvancedThreatAnalytics.1_8.Center.EncryptionDowngradeOverPasstheHashSuspiciousActivityMicrosoft.AdvancedThreatAnalytics.1_8.Center.EncryptionDowngradeOverPasstheHashSuspiciousActivityMicrosoft.AdvancedThreatAnalytics.1_8.CenterSecurityHealthFalse00TrueErrorNormalTrueMicrosoft ATA
Microsoft.AdvancedThreatAnalytics.1_8.Center.EncryptionDowngradeSkeletonKeySuspiciousActivityMicrosoft.AdvancedThreatAnalytics.1_8.Center.EncryptionDowngradeSkeletonKeySuspiciousActivityMicrosoft.AdvancedThreatAnalytics.1_8.Center.EncryptionDowngradeSkeletonKeySuspiciousActivityMicrosoft.AdvancedThreatAnalytics.1_8.CenterSecurityHealthFalse00TrueErrorNormalTrueMicrosoft ATA