| DisplayName | Description | ID | Target | Category | Enabled | Instance Name | Counter Name | Frequency | Event_ID | Event Source | Alert Generate | Alert Severity | Alert Priority | Remotable | Event Log |
 | AgentNotRegistered | | AgentNotRegisterd_1_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Edge_Transport_Installation | EventCollection | True | | | 0 | 1016 | FSEIMC | True | Error | Normal | True | Application |
 | AgentNotRegistered | | AgentNotRegisterd_3_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Hub_Transport__Mailbox__Public_Folder_Installation | EventCollection | True | | | 0 | 1016 | FSEIMC | True | Error | Normal | True | Application |
 | AgentNotRegistered | | AgentNotRegisterd_4_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Hub_Transport_Installation | EventCollection | True | | | 0 | 1016 | FSEIMC | True | Error | Normal | True | Application |
 | CCRReplicationServiceClusterMonitorEndE | | CCRReplicationServiceClusterMonitorEndE_2_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___All_Servers_Installation | EventCollection | True | | | 0 | 9601 | FSECCRService | True | Information | Normal | True | Application |
 | CCRReplicationServiceClusterMonitorNotifyFailE | | CCRReplicationServiceClusterMonitorNotifyFailE_2_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___All_Servers_Installation | EventCollection | True | | | 0 | 9602 | FSECCRService | True | Warning | Normal | True | Application |
 | CCRReplicationServiceClusterMonitorOpenClusterErrorE | | CCRReplicationServiceClusterMonitorOpenClusterErrorE_2_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___All_Servers_Installation | EventCollection | True | | | 0 | 9603 | FSECCRService | True | Error | Low | True | Application |
 | CCRReplicationServiceClusterMonitorStartE | | CCRReplicationServiceClusterMonitorStartE_2_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___All_Servers_Installation | EventCollection | True | | | 0 | 9600 | FSECCRService | True | Information | Normal | True | Application |
 | CCRReplicationServiceEngineSyncEndE | | CCRReplicationServiceEngineSyncEndE_2_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___All_Servers_Installation | EventCollection | True | | | 0 | 9503 | FSECCRService | True | Information | Normal | True | Application |
 | CCRReplicationServiceEngineSyncEngineReplicationFailedE | | CCRReplicationServiceEngineSyncEngineReplicationFailedE_2_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___All_Servers_Installation | EventCollection | True | | | 0 | 9507 | FSECCRService | True | Error | Low | True | Application |
 | CCRReplicationServiceEngineSyncEngineReplicationSkippedNoActiveNodeE | | CCRReplicationServiceEngineSyncEngineReplicationSkippedNoActiveNodeE_2_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___All_Servers_Installation | EventCollection | True | | | 0 | 9510 | FSECCRService | True | Error | Low | True | Application |
 | CCRReplicationServiceEngineSyncEngineReplicationSkippedNoSourceE | | CCRReplicationServiceEngineSyncEngineReplicationSkippedNoSourceE_2_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___All_Servers_Installation | EventCollection | True | | | 0 | 9505 | FSECCRService | True | Information | Normal | True | Application |
 | CCRReplicationServiceEngineSyncEngineReplicationSkippedNoUpdateNeededE | | CCRReplicationServiceEngineSyncEngineReplicationSkippedNoUpdateNeededE_2_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___All_Servers_Installation | EventCollection | True | | | 0 | 9506 | FSECCRService | False | | | True | Application |
 | CCRReplicationServiceEngineSyncEngineReplicationSucceededE | | CCRReplicationServiceEngineSyncEngineReplicationSucceededE_2_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___All_Servers_Installation | EventCollection | True | | | 0 | 9504 | FSECCRService | False | | | True | Application |
 | CCRReplicationServiceEngineSyncErrorE | | CCRReplicationServiceEngineSyncErrorE_2_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___All_Servers_Installation | EventCollection | True | | | 0 | 9500 | FSECCRService | True | Error | Low | True | Application |
 | CCRReplicationServiceEngineSyncForefrontRunOrEngineUpdateLockErrorE | | CCRReplicationServiceEngineSyncForefrontRunOrEngineUpdateLockErrorE_2_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___All_Servers_Installation | EventCollection | True | | | 0 | 9508 | FSECCRService | True | Warning | Normal | True | Application |
 | CCRReplicationServiceEngineSyncForefrontRunOrEngineUpdateLockTimeoutE | | CCRReplicationServiceEngineSyncForefrontRunOrEngineUpdateLockTimeoutE_2_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___All_Servers_Installation | EventCollection | True | | | 0 | 9509 | FSECCRService | True | Warning | Normal | True | Application |
 | CCRReplicationServiceEngineSyncStartE | | CCRReplicationServiceEngineSyncStartE_2_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___All_Servers_Installation | EventCollection | True | | | 0 | 9502 | FSECCRService | True | Information | Normal | True | Application |
 | CCRReplicationServiceFileSyncEndE | | CCRReplicationServiceFileSyncEndE_2_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___All_Servers_Installation | EventCollection | True | | | 0 | 9409 | FSECCRService | True | Information | Normal | True | Application |
 | CCRReplicationServiceFileSyncErrorE | | CCRReplicationServiceFileSyncErrorE_2_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___All_Servers_Installation | EventCollection | True | | | 0 | 9400 | FSECCRService | True | Error | Low | True | Application |
 | CCRReplicationServiceFileSyncFileReplicationFailedE | | CCRReplicationServiceFileSyncFileReplicationFailedE_2_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___All_Servers_Installation | EventCollection | True | | | 0 | 9415 | FSECCRService | True | Error | Low | True | Application |
 | CCRReplicationServiceFileSyncFileReplicationSkippedE | | CCRReplicationServiceFileSyncFileReplicationSkippedE_2_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___All_Servers_Installation | EventCollection | True | | | 0 | 9414 | FSECCRService | False | | | True | Application |
 | CCRReplicationServiceFileSyncFileReplicationSkippedNoActiveNodeE | | CCRReplicationServiceFileSyncFileReplicationSkippedNoActiveNodeE_2_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___All_Servers_Installation | EventCollection | True | | | 0 | 9421 | FSECCRService | True | Warning | Normal | True | Application |
 | CCRReplicationServiceFileSyncFileReplicationSkippedNotNewerE | | CCRReplicationServiceFileSyncFileReplicationSkippedNotNewerE_2_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___All_Servers_Installation | EventCollection | True | | | 0 | 9413 | FSECCRService | False | | | True | Application |
 | CCRReplicationServiceFileSyncFileReplicationSucceededE | | CCRReplicationServiceFileSyncFileReplicationSucceededE_2_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___All_Servers_Installation | EventCollection | True | | | 0 | 9412 | FSECCRService | False | | | True | Application |
 | CCRReplicationServiceFileSyncForceInitialSyncE | | CCRReplicationServiceFileSyncForceInitialSyncE_2_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___All_Servers_Installation | EventCollection | True | | | 0 | 9410 | FSECCRService | True | Information | Normal | True | Application |
 | CCRReplicationServiceFileSyncNoForefrontRunLockE | | CCRReplicationServiceFileSyncNoForefrontRunLockE_2_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___All_Servers_Installation | EventCollection | True | | | 0 | 9411 | FSECCRService | True | Warning | Normal | True | Application |
 | CCRReplicationServiceFileSyncPersistentBackupFailedE | | CCRReplicationServiceFileSyncPersistentBackupFailedE_2_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___All_Servers_Installation | EventCollection | True | | | 0 | 9418 | FSECCRService | True | Error | Low | True | Application |
 | CCRReplicationServiceFileSyncPersistentBackupSkippedFileNotFoundE | | CCRReplicationServiceFileSyncPersistentBackupSkippedFileNotFoundE_2_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___All_Servers_Installation | EventCollection | True | | | 0 | 9417 | FSECCRService | True | Warning | Normal | True | Application |
 | CCRReplicationServiceFileSyncPersistentBackupSucceededE | | CCRReplicationServiceFileSyncPersistentBackupSucceededE_2_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___All_Servers_Installation | EventCollection | True | | | 0 | 9416 | FSECCRService | True | Information | Low | True | Application |
 | CCRReplicationServiceFileSyncPruningFailedE | | CCRReplicationServiceFileSyncPruningFailedE_2_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___All_Servers_Installation | EventCollection | True | | | 0 | 9420 | FSECCRService | True | Error | Low | True | Application |
 | CCRReplicationServiceFileSyncPruningSucceededE | | CCRReplicationServiceFileSyncPruningSucceededE_2_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___All_Servers_Installation | EventCollection | True | | | 0 | 9419 | FSECCRService | True | Information | Normal | True | Application |
 | CCRReplicationServiceFileSyncSeedingCompleteE | | CCRReplicationServiceFileSyncSeedingCompleteE_2_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___All_Servers_Installation | EventCollection | True | | | 0 | 9422 | FSECCRService | True | Information | Low | True | Application |
 | CCRReplicationServiceFileSyncSeedingFailedE | | CCRReplicationServiceFileSyncSeedingFailedE_2_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___All_Servers_Installation | EventCollection | True | | | 0 | 9423 | FSECCRService | True | Warning | Normal | True | Application |
 | CCRReplicationServiceFileSyncStartE | | CCRReplicationServiceFileSyncStartE_2_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___All_Servers_Installation | EventCollection | True | | | 0 | 9408 | FSECCRService | True | Information | Normal | True | Application |
 | CCRReplicationServiceGetActiveNodeFailureE | | CCRReplicationServiceGetActiveNodeFailureE_2_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___All_Servers_Installation | EventCollection | True | | | 0 | 9103 | FSECCRService | True | Error | Low | True | Application |
 | CCRReplicationServiceInitialNodeStateActiveE | | CCRReplicationServiceInitialNodeStateActiveE_2_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___All_Servers_Installation | EventCollection | True | | | 0 | 9300 | FSECCRService | True | Information | Normal | True | Application |
 | CCRReplicationServiceInitialNodeStatePassiveE | | CCRReplicationServiceInitialNodeStatePassiveE_2_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___All_Servers_Installation | EventCollection | True | | | 0 | 9301 | FSECCRService | True | Information | Normal | True | Application |
 | CCRReplicationServiceMaxBackupAgeMin2E | | CCRReplicationServiceMaxBackupAgeMin2E_2_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___All_Servers_Installation | EventCollection | True | | | 0 | 9407 | FSECCRService | True | Warning | Normal | True | Application |
 | CCRReplicationServiceMaxBackupAgeMinE | | CCRReplicationServiceMaxBackupAgeMinE_2_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___All_Servers_Installation | EventCollection | True | | | 0 | 9406 | FSECCRService | True | Warning | Normal | True | Application |
 | CCRReplicationServiceMaxBackupsMin2E | | CCRReplicationServiceMaxBackupsMin2E_2_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___All_Servers_Installation | EventCollection | True | | | 0 | 9404 | FSECCRService | True | Warning | Normal | True | Application |
 | CCRReplicationServiceMaxBackupsMinE | | CCRReplicationServiceMaxBackupsMinE_2_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___All_Servers_Installation | EventCollection | True | | | 0 | 9403 | FSECCRService | True | Warning | Normal | True | Application |
 | CCRReplicationServiceMinBackupAgeMinE | | CCRReplicationServiceMinBackupAgeMinE_2_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___All_Servers_Installation | EventCollection | True | | | 0 | 9405 | FSECCRService | True | Warning | Normal | True | Application |
 | CCRReplicationServiceMinBackupsMinE | | CCRReplicationServiceMinBackupsMinE_2_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___All_Servers_Installation | EventCollection | True | | | 0 | 9402 | FSECCRService | True | Warning | Normal | True | Application |
 | CCRReplicationServicePausedE | | CCRReplicationServicePausedE_2_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___All_Servers_Installation | EventCollection | True | | | 0 | 9002 | FSECCRService | True | Information | Low | True | Application |
 | CCRReplicationServiceResumedE | | CCRReplicationServiceResumedE_2_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___All_Servers_Installation | EventCollection | True | | | 0 | 9003 | FSECCRService | True | Information | Low | True | Application |
 | CCRReplicationServiceStartedE | | CCRReplicationServiceStartedE_2_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___All_Servers_Installation | EventCollection | True | | | 0 | 9000 | FSECCRService | True | Information | Low | True | Application |
 | CCRReplicationServiceStoppedE | | CCRReplicationServiceStoppedE_2_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___All_Servers_Installation | EventCollection | True | | | 0 | 9001 | FSECCRService | True | Information | Low | True | Application |
 | CCRReplicationServiceTransitionFailureE | | CCRReplicationServiceTransitionFailureE_2_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___All_Servers_Installation | EventCollection | True | | | 0 | 9102 | FSECCRService | True | Error | Low | True | Application |
 | CCRServiceConfigErrorE | | CCRServiceConfigErrorE_2_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___All_Servers_Installation | EventCollection | True | | | 0 | 9201 | FSECCRService | True | Error | Low | True | Application |
 | CCRServiceErrorE | | CCRServiceErrorE_2_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___All_Servers_Installation | EventCollection | True | | | 0 | 9100 | FSECCRService | True | Error | Low | True | Application |
 | CCRServiceNoConfigE | | CCRServiceNoConfigE_2_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___All_Servers_Installation | EventCollection | True | | | 0 | 9200 | FSECCRService | True | Error | Low | True | Application |
 | CCRServiceServiceErrorE | | CCRServiceServiceErrorE_2_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___All_Servers_Installation | EventCollection | True | | | 0 | 9050 | FSECCRService | True | Error | Low | True | Application |
 | CCRServiceUnknowErrorE | | CCRServiceUnknowErrorE_2_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___All_Servers_Installation | EventCollection | True | | | 0 | 9101 | FSECCRService | True | Error | Low | True | Application |
 | EnginesOutOfDateE | | EnginesOutOfDateE_2_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___All_Servers_Installation | EventCollection | True | | | 0 | 7007 | Microsoft Forefront Security | True | Warning | Normal | True | Application |
 | EnginesOutOfDateW | | EnginesOutOfDateW_2_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___All_Servers_Installation | EventCollection | True | | | 0 | 7006 | Microsoft Forefront Security | True | Warning | Normal | True | Application |
 | EngineUpdatesE | | EngineUpdatesE_2_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___All_Servers_Installation | EventCollection | True | | | 0 | 7004 | Microsoft Forefront Security | True | Warning | Normal | True | Application |
 | EngineUpdatesW | | EngineUpdatesW_2_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___All_Servers_Installation | EventCollection | True | | | 0 | 0 | Microsoft Forefront Security | True | Warning | Normal | True | Application |
 | ForefrontServiceDiscovery | | ForefrontServiceDiscovery_2_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___All_Servers_Installation | EventCollection | True | | | 0 | 0 | | False | | | True | |
 | LicenseStateE | | LicenseStateE_2_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___All_Servers_Installation | EventCollection | True | | | 0 | 7030 | FSCController | True | Error | Normal | True | Application |
 | LicenseStateW | | LicenseStateW_2_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___All_Servers_Installation | EventCollection | True | | | 0 | 7029 | FSCController | True | Warning | Normal | True | Application |
 | MailboxConnected | | MailboxConnected_3_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Hub_Transport__Mailbox__Public_Folder_Installation | EventCollection | True | | | 0 | 7027 | Microsoft Forefront Security | True | Error | Normal | True | Application |
 | MailboxConnected | | MailboxConnected_5_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Mailbox__Public_Folder_Installation | EventCollection | True | | | 0 | 7027 | Microsoft Forefront Security | True | Error | Normal | True | Application |
 | RealtimeEnginesInitialized | | RealTimeEnginesIntialized_3_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Hub_Transport__Mailbox__Public_Folder_Installation | EventCollection | True | | | 0 | 7011 | Microsoft Forefront Security | True | Error | Normal | True | Application |
 | RealtimeEnginesInitialized | | RealTimeEnginesIntialized_5_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Mailbox__Public_Folder_Installation | EventCollection | True | | | 0 | 7011 | Microsoft Forefront Security | True | Error | Normal | True | Application |
 | RealtimeScanJobEnabledE | | RealtimeScanJobEnabledE_3_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Hub_Transport__Mailbox__Public_Folder_Installation | EventCollection | True | | | 0 | 7017 | Microsoft Forefront Security | True | Error | Normal | True | Application |
 | RealtimeScanJobEnabledE | | RealtimeScanJobEnabledE_5_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Mailbox__Public_Folder_Installation | EventCollection | True | | | 0 | 7017 | Microsoft Forefront Security | True | Error | Normal | True | Application |
 | RealtimeScanJobEnabledW | | RealTimeScanJobEnabledW_3_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Hub_Transport__Mailbox__Public_Folder_Installation | EventCollection | True | | | 0 | 0 | Microsoft Forefront Security | True | Warning | Normal | True | Application |
 | RealtimeScanJobEnabledW | | RealTimeScanJobEnabledW_5_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Mailbox__Public_Folder_Installation | EventCollection | True | | | 0 | 0 | Microsoft Forefront Security | True | Warning | Normal | True | Application |
 | RealtimeScanProcessStateE | | RealtimeScanProcessStateE_3_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Hub_Transport__Mailbox__Public_Folder_Installation | EventCollection | True | | | 0 | 7020 | Microsoft Forefront Security | True | Error | Normal | True | Application |
 | RealtimeScanProcessStateE | | RealtimeScanProcessStateE_5_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Mailbox__Public_Folder_Installation | EventCollection | True | | | 0 | 7020 | Microsoft Forefront Security | True | Error | Normal | True | Application |
 | RealtimeScanProcessStateW | | RealtimeScanProcessStateW_3_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Hub_Transport__Mailbox__Public_Folder_Installation | EventCollection | True | | | 0 | 7019 | Microsoft Forefront Security | True | Warning | Normal | True | Application |
 | RealtimeScanProcessStateW | | RealtimeScanProcessStateW_5_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Mailbox__Public_Folder_Installation | EventCollection | True | | | 0 | 7019 | Microsoft Forefront Security | True | Warning | Normal | True | Application |
 | RollbackFail | | RollbackFail_2_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___All_Servers_Installation | EventCollection | True | | | 0 | 6016 | GetEngineFiles | True | Error | Low | True | Application |
 | RollbackSuccess | | RollbackSuccess_2_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___All_Servers_Installation | EventCollection | True | | | 0 | 2049 | GetEngineFiles | False | | | True | Application |
 | ScanManualCountAttachmentClean | | ScanManualCountAttachmentClean_3_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Hub_Transport__Mailbox__Public_Folder_Installation | PerformanceCollection | True | Microsoft Forefront Server Security Scan | Total Attachments Cleaned | 1800 | 0 | | False | | | True | |
 | ScanManualCountAttachmentClean | | ScanManualCountAttachmentClean_5_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Mailbox__Public_Folder_Installation | PerformanceCollection | True | Microsoft Forefront Server Security Scan | Total Attachments Cleaned | 1800 | 0 | | False | | | True | |
 | ScanManualCountAttachmentDetect | | ScanManualCountAttachmentDetect_3_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Hub_Transport__Mailbox__Public_Folder_Installation | PerformanceCollection | True | Microsoft Forefront Server Security Scan | Total Attachments Detected | 1800 | 0 | | False | | | True | |
 | ScanManualCountAttachmentDetect | | ScanManualCountAttachmentDetect_5_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Mailbox__Public_Folder_Installation | PerformanceCollection | True | Microsoft Forefront Server Security Scan | Total Attachments Detected | 1800 | 0 | | False | | | True | |
 | ScanManualCountAttachmentRemove | | ScanManualCountAttachmentRemove_3_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Hub_Transport__Mailbox__Public_Folder_Installation | PerformanceCollection | True | Microsoft Forefront Server Security Scan | Total Attachments Removed | 1800 | 0 | | False | | | True | |
 | ScanManualCountAttachmentRemove | | ScanManualCountAttachmentRemove_5_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Mailbox__Public_Folder_Installation | PerformanceCollection | True | Microsoft Forefront Server Security Scan | Total Attachments Removed | 1800 | 0 | | False | | | True | |
 | ScanManualCountAttachmentScan | | ScanManualCountAttachmentScan_3_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Hub_Transport__Mailbox__Public_Folder_Installation | PerformanceCollection | True | Microsoft Forefront Server Security Scan | Total Attachments Scanned | 1800 | 0 | | False | | | True | |
 | ScanManualCountAttachmentScan | | ScanManualCountAttachmentScan_5_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Mailbox__Public_Folder_Installation | PerformanceCollection | True | Microsoft Forefront Server Security Scan | Total Attachments Scanned | 1800 | 0 | | False | | | True | |
 | ScanManualCountMessageDetect | | ScanManualCountMessageDetect_3_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Hub_Transport__Mailbox__Public_Folder_Installation | PerformanceCollection | True | Microsoft Forefront Server Security Scan | Total Messages Detected | 1800 | 0 | | False | | | True | |
 | ScanManualCountMessageDetect | | ScanManualCountMessageDetect_5_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Mailbox__Public_Folder_Installation | PerformanceCollection | True | Microsoft Forefront Server Security Scan | Total Messages Detected | 1800 | 0 | | False | | | True | |
 | ScanManualCountMessagePurge | | ScanManualCountMessagePurge_3_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Hub_Transport__Mailbox__Public_Folder_Installation | PerformanceCollection | True | Microsoft Forefront Server Security Scan | Total Messages Purged | 1800 | 0 | | False | | | True | |
 | ScanManualCountMessagePurge | | ScanManualCountMessagePurge_5_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Mailbox__Public_Folder_Installation | PerformanceCollection | True | Microsoft Forefront Server Security Scan | Total Messages Purged | 1800 | 0 | | False | | | True | |
 | ScanManualCountMessageScan | | ScanManualCountMessageScan_3_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Hub_Transport__Mailbox__Public_Folder_Installation | PerformanceCollection | True | Microsoft Forefront Server Security Scan | Total Messages Scanned | 1800 | 0 | | False | | | True | |
 | ScanManualCountMessageScan | | ScanManualCountMessageScan_5_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Mailbox__Public_Folder_Installation | PerformanceCollection | True | Microsoft Forefront Server Security Scan | Total Messages Scanned | 1800 | 0 | | False | | | True | |
 | ScanManualCountMessageTag | | ScanManualCountMessageTag_3_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Hub_Transport__Mailbox__Public_Folder_Installation | PerformanceCollection | True | Microsoft Forefront Server Security Scan | Total Messages Tagged | 1800 | 0 | | False | | | True | |
 | ScanManualCountMessageTag | | ScanManualCountMessageTag_5_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Mailbox__Public_Folder_Installation | PerformanceCollection | True | Microsoft Forefront Server Security Scan | Total Messages Tagged | 1800 | 0 | | False | | | True | |
 | ScanManualEngineMapE | | ScanManualEngineMapE_3_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Hub_Transport__Mailbox__Public_Folder_Installation | EventCollection | True | | | 0 | 5030 | FSCManualScanner | True | Error | Normal | True | Application |
 | ScanManualEngineMapE | | ScanManualEngineMapE_5_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Mailbox__Public_Folder_Installation | EventCollection | True | | | 0 | 5030 | FSCManualScanner | True | Error | Normal | True | Application |
 | ScanManualFailedE | | ScanManualFailedE_3_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Hub_Transport__Mailbox__Public_Folder_Installation | EventCollection | True | | | 0 | 0 | FSCManualScanner | True | Error | Low | True | Application |
 | ScanManualFailedE | | ScanManualFailedE_5_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Mailbox__Public_Folder_Installation | EventCollection | True | | | 0 | 0 | FSCManualScanner | True | Error | Low | True | Application |
 | ScanManualProblemE | | ScanManualProblemE_3_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Hub_Transport__Mailbox__Public_Folder_Installation | EventCollection | True | | | 0 | 5166 | FSCController | True | Error | Low | True | Application |
 | ScanManualProblemE | | ScanManualProblemE_5_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Mailbox__Public_Folder_Installation | EventCollection | True | | | 0 | 5166 | FSCController | True | Error | Low | True | Application |
 | ScanManualRateAttachmentScan | | ScanManualRateAttachmentScan_3_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Hub_Transport__Mailbox__Public_Folder_Installation | PerformanceCollection | True | Microsoft Forefront Server Security Scan | Attachments Scanned Rate | 300 | 0 | | False | | | True | |
 | ScanManualRateAttachmentScan | | ScanManualRateAttachmentScan_5_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Mailbox__Public_Folder_Installation | PerformanceCollection | True | Microsoft Forefront Server Security Scan | Attachments Scanned Rate | 300 | 0 | | False | | | True | |
 | ScanManualStartedE | | ScanManualStartedE_3_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Hub_Transport__Mailbox__Public_Folder_Installation | EventCollection | True | | | 0 | 2002 | FSCManualScanner | False | | | True | Application |
 | ScanManualStartedE | | ScanManualStartedE_5_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Mailbox__Public_Folder_Installation | EventCollection | True | | | 0 | 2002 | FSCManualScanner | False | | | True | Application |
 | ScanManualStoppedE | | ScanManualStoppedE_3_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Hub_Transport__Mailbox__Public_Folder_Installation | EventCollection | True | | | 0 | 2005 | FSCManualScanner | False | | | True | Application |
 | ScanManualStoppedE | | ScanManualStoppedE_5_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Mailbox__Public_Folder_Installation | EventCollection | True | | | 0 | 2005 | FSCManualScanner | False | | | True | Application |
 | ScanningStatistics | | ScanningStatistics_2_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___All_Servers_Installation | EventCollection | True | | | 0 | 7032 | StatisticsManager | True | Error | Normal | True | Application |
 | ScanRealtimeAbortE | | ScanRealtimeAbortE_3_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Hub_Transport__Mailbox__Public_Folder_Installation | Custom | True | | | 0 | 5066 | FSEVsapi | True | Warning | Normal | True | Application |
 | ScanRealtimeAbortE | | ScanRealtimeAbortE_5_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Mailbox__Public_Folder_Installation | Custom | True | | | 0 | 5066 | FSEVsapi | True | Warning | Normal | True | Application |
 | ScanRealtimeCountAttachmentClean | | ScanRealtimeCountAttachmentClean_3_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Hub_Transport__Mailbox__Public_Folder_Installation | PerformanceCollection | True | Microsoft Forefront Server Security Scan | Total Attachments Cleaned | 1800 | 0 | | False | | | True | |
 | ScanRealtimeCountAttachmentClean | | ScanRealtimeCountAttachmentClean_5_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Mailbox__Public_Folder_Installation | PerformanceCollection | True | Microsoft Forefront Server Security Scan | Total Attachments Cleaned | 1800 | 0 | | False | | | True | |
 | ScanRealtimeCountAttachmentDetect | | ScanRealtimeCountAttachmentDetect_3_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Hub_Transport__Mailbox__Public_Folder_Installation | PerformanceCollection | True | Microsoft Forefront Server Security Scan | Total Attachments Detected | 1800 | 0 | | False | | | True | |
 | ScanRealtimeCountAttachmentDetect | | ScanRealtimeCountAttachmentDetect_5_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Mailbox__Public_Folder_Installation | PerformanceCollection | True | Microsoft Forefront Server Security Scan | Total Attachments Detected | 1800 | 0 | | False | | | True | |
 | ScanRealtimeCountAttachmentRemove | | ScanRealtimeCountAttachmentRemove_3_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Hub_Transport__Mailbox__Public_Folder_Installation | PerformanceCollection | True | Microsoft Forefront Server Security Scan | Total Attachments Removed | 1800 | 0 | | False | | | True | |
 | ScanRealtimeCountAttachmentRemove | | ScanRealtimeCountAttachmentRemove_5_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Mailbox__Public_Folder_Installation | PerformanceCollection | True | Microsoft Forefront Server Security Scan | Total Attachments Removed | 1800 | 0 | | False | | | True | |
 | ScanRealtimeCountAttachmentScan | | ScanRealtimeCountAttachmentScan_3_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Hub_Transport__Mailbox__Public_Folder_Installation | PerformanceCollection | True | Microsoft Forefront Server Security Scan | Total Attachments Scanned | 1800 | 0 | | False | | | True | |
 | ScanRealtimeCountAttachmentScan | | ScanRealtimeCountAttachmentScan_5_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Mailbox__Public_Folder_Installation | PerformanceCollection | True | Microsoft Forefront Server Security Scan | Total Attachments Scanned | 1800 | 0 | | False | | | True | |
 | ScanRealtimeCountMessageDetect | | ScanRealtimeCountMessageDetect_3_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Hub_Transport__Mailbox__Public_Folder_Installation | PerformanceCollection | True | Microsoft Forefront Server Security Scan | Total Messages Detected | 1800 | 0 | | False | | | True | |
 | ScanRealtimeCountMessageDetect | | ScanRealtimeCountMessageDetect_5_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Mailbox__Public_Folder_Installation | PerformanceCollection | True | Microsoft Forefront Server Security Scan | Total Messages Detected | 1800 | 0 | | False | | | True | |
 | ScanRealtimeCountMessagePurge | | ScanRealtimeCountMessagePurge_3_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Hub_Transport__Mailbox__Public_Folder_Installation | PerformanceCollection | True | Microsoft Forefront Server Security Scan | Total Messages Purged | 1800 | 0 | | False | | | True | |
 | ScanRealtimeCountMessagePurge | | ScanRealtimeCountMessagePurge_5_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Mailbox__Public_Folder_Installation | PerformanceCollection | True | Microsoft Forefront Server Security Scan | Total Messages Purged | 1800 | 0 | | False | | | True | |
 | ScanRealtimeCountMessageScan | | ScanRealtimeCountMessageScan_3_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Hub_Transport__Mailbox__Public_Folder_Installation | PerformanceCollection | True | Microsoft Forefront Server Security Scan | Total Messages Scanned | 1800 | 0 | | False | | | True | |
 | ScanRealtimeCountMessageScan | | ScanRealtimeCountMessageScan_5_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Mailbox__Public_Folder_Installation | PerformanceCollection | True | Microsoft Forefront Server Security Scan | Total Messages Scanned | 1800 | 0 | | False | | | True | |
 | ScanRealtimeCountMessageTag | | ScanRealtimeCountMessageTag_3_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Hub_Transport__Mailbox__Public_Folder_Installation | PerformanceCollection | True | Microsoft Forefront Server Security Scan | Total Messages Tagged | 1800 | 0 | | False | | | True | |
 | ScanRealtimeCountMessageTag | | ScanRealtimeCountMessageTag_5_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Mailbox__Public_Folder_Installation | PerformanceCollection | True | Microsoft Forefront Server Security Scan | Total Messages Tagged | 1800 | 0 | | False | | | True | |
 | ScanRealtimeEngineMapE | | ScanRealtimeEngineMapE_3_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Hub_Transport__Mailbox__Public_Folder_Installation | EventCollection | True | | | 0 | 5030 | FSCRealtimeScanner | True | Error | Normal | True | Application |
 | ScanRealtimeEngineMapE | | ScanRealtimeEngineMapE_5_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Mailbox__Public_Folder_Installation | EventCollection | True | | | 0 | 5030 | FSCRealtimeScanner | True | Error | Normal | True | Application |
 | ScanRealtimeProcessUsage | | ScanRealtimeProcessUsage_3_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Hub_Transport__Mailbox__Public_Folder_Installation | PerformanceCollection | True | Process | \% Processor Time | 300 | 0 | | False | | | True | |
 | ScanRealtimeProcessUsage | | ScanRealtimeProcessUsage_5_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Mailbox__Public_Folder_Installation | PerformanceCollection | True | Process | \% Processor Time | 300 | 0 | | False | | | True | |
 | ScanRealtimeRateAttachmentScan | | ScanRealtimeRateAttachmentScan_3_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Hub_Transport__Mailbox__Public_Folder_Installation | PerformanceCollection | True | Microsoft Forefront Server Security Scan | Attachments Scanned Rate | 300 | 0 | | False | | | True | |
 | ScanRealtimeRateAttachmentScan | | ScanRealtimeRateAttachmentScan_5_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Mailbox__Public_Folder_Installation | PerformanceCollection | True | Microsoft Forefront Server Security Scan | Attachments Scanned Rate | 300 | 0 | | False | | | True | |
 | ScanRealtimeTimeoutE | | ScanRealtimeTimeoutE_3_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Hub_Transport__Mailbox__Public_Folder_Installation | EventCollection | True | | | 0 | 5066 | FSCController | True | Warning | Normal | True | Application |
 | ScanRealtimeTimeoutE | | ScanRealtimeTimeoutE_5_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Mailbox__Public_Folder_Installation | EventCollection | True | | | 0 | 5066 | FSCController | True | Warning | Normal | True | Application |
 | ScanTransportAbortE | | ScanTransportAbortE_1_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Edge_Transport_Installation | Custom | True | | | 0 | 5015 | FSEAgent | True | Warning | Normal | True | Application |
 | ScanTransportAbortE | | ScanTransportAbortE_3_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Hub_Transport__Mailbox__Public_Folder_Installation | Custom | True | | | 0 | 5015 | FSEAgent | True | Warning | Normal | True | Application |
 | ScanTransportAbortE | | ScanTransportAbortE_4_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Hub_Transport_Installation | Custom | True | | | 0 | 5015 | FSEAgent | True | Warning | Normal | True | Application |
 | ScanTransportCountAttachmentClean | | ScanTransportCountAttachmentClean_1_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Edge_Transport_Installation | PerformanceCollection | True | Microsoft Forefront Server Security Scan | Total Attachments Cleaned | 1800 | 0 | | False | | | True | |
 | ScanTransportCountAttachmentClean | | ScanTransportCountAttachmentClean_3_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Hub_Transport__Mailbox__Public_Folder_Installation | PerformanceCollection | True | Microsoft Forefront Server Security Scan | Total Attachments Cleaned | 1800 | 0 | | False | | | True | |
 | ScanTransportCountAttachmentClean | | ScanTransportCountAttachmentClean_4_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Hub_Transport_Installation | PerformanceCollection | True | Microsoft Forefront Server Security Scan | Total Attachments Cleaned | 1800 | 0 | | False | | | True | |
 | ScanTransportCountAttachmentDetect | | ScanTransportCountAttachmentDetect_1_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Edge_Transport_Installation | PerformanceCollection | True | Microsoft Forefront Server Security Scan | Total Attachments Detected | 1800 | 0 | | False | | | True | |
 | ScanTransportCountAttachmentDetect | | ScanTransportCountAttachmentDetect_3_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Hub_Transport__Mailbox__Public_Folder_Installation | PerformanceCollection | True | Microsoft Forefront Server Security Scan | Total Attachments Detected | 1800 | 0 | | False | | | True | |
 | ScanTransportCountAttachmentDetect | | ScanTransportCountAttachmentDetect_4_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Hub_Transport_Installation | PerformanceCollection | True | Microsoft Forefront Server Security Scan | Total Attachments Detected | 1800 | 0 | | False | | | True | |
 | ScanTransportCountAttachmentRemove | | ScanTransportCountAttachmentRemove_1_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Edge_Transport_Installation | PerformanceCollection | True | Microsoft Forefront Server Security Scan | Total Attachments Removed | 1800 | 0 | | False | | | True | |
 | ScanTransportCountAttachmentRemove | | ScanTransportCountAttachmentRemove_3_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Hub_Transport__Mailbox__Public_Folder_Installation | PerformanceCollection | True | Microsoft Forefront Server Security Scan | Total Attachments Removed | 1800 | 0 | | False | | | True | |
 | ScanTransportCountAttachmentRemove | | ScanTransportCountAttachmentRemove_4_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Hub_Transport_Installation | PerformanceCollection | True | Microsoft Forefront Server Security Scan | Total Attachments Removed | 1800 | 0 | | False | | | True | |
 | ScanTransportCountAttachmentScan | | ScanTransportCountAttachmentScan_1_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Edge_Transport_Installation | PerformanceCollection | True | Microsoft Forefront Server Security Scan | Total Attachments Scanned | 1800 | 0 | | False | | | True | |
 | ScanTransportCountAttachmentScan | | ScanTransportCountAttachmentScan_3_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Hub_Transport__Mailbox__Public_Folder_Installation | PerformanceCollection | True | Microsoft Forefront Server Security Scan | Total Attachments Scanned | 1800 | 0 | | False | | | True | |
 | ScanTransportCountAttachmentScan | | ScanTransportCountAttachmentScan_4_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Hub_Transport_Installation | PerformanceCollection | True | Microsoft Forefront Server Security Scan | Total Attachments Scanned | 1800 | 0 | | False | | | True | |
 | ScanTransportCountMessageDetect | | ScanTransportCountMessageDetect_1_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Edge_Transport_Installation | PerformanceCollection | True | Microsoft Forefront Server Security Scan | Total Messages Detected | 1800 | 0 | | False | | | True | |
 | ScanTransportCountMessageDetect | | ScanTransportCountMessageDetect_3_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Hub_Transport__Mailbox__Public_Folder_Installation | PerformanceCollection | True | Microsoft Forefront Server Security Scan | Total Messages Detected | 1800 | 0 | | False | | | True | |
 | ScanTransportCountMessageDetect | | ScanTransportCountMessageDetect_4_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Hub_Transport_Installation | PerformanceCollection | True | Microsoft Forefront Server Security Scan | Total Messages Detected | 1800 | 0 | | False | | | True | |
 | ScanTransportCountMessagePurge | | ScanTransportCountMessagePurge_1_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Edge_Transport_Installation | PerformanceCollection | True | Microsoft Forefront Server Security Scan | Total Messages Purged | 1800 | 0 | | False | | | True | |
 | ScanTransportCountMessagePurge | | ScanTransportCountMessagePurge_3_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Hub_Transport__Mailbox__Public_Folder_Installation | PerformanceCollection | True | Microsoft Forefront Server Security Scan | Total Messages Purged | 1800 | 0 | | False | | | True | |
 | ScanTransportCountMessagePurge | | ScanTransportCountMessagePurge_4_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Hub_Transport_Installation | PerformanceCollection | True | Microsoft Forefront Server Security Scan | Total Messages Purged | 1800 | 0 | | False | | | True | |
 | ScanTransportCountMessageScan | | ScanTransportCountMessageScan_1_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Edge_Transport_Installation | PerformanceCollection | True | Microsoft Forefront Server Security Scan | Total Messages Scanned | 1800 | 0 | | False | | | True | |
 | ScanTransportCountMessageScan | | ScanTransportCountMessageScan_3_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Hub_Transport__Mailbox__Public_Folder_Installation | PerformanceCollection | True | Microsoft Forefront Server Security Scan | Total Messages Scanned | 1800 | 0 | | False | | | True | |
 | ScanTransportCountMessageScan | | ScanTransportCountMessageScan_4_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Hub_Transport_Installation | PerformanceCollection | True | Microsoft Forefront Server Security Scan | Total Messages Scanned | 1800 | 0 | | False | | | True | |
 | ScanTransportCountMessageTag | | ScanTransportCountMessageTag_1_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Edge_Transport_Installation | PerformanceCollection | True | Microsoft Forefront Server Security Scan | Total Messages Tagged | 1800 | 0 | | False | | | True | |
 | ScanTransportCountMessageTag | | ScanTransportCountMessageTag_3_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Hub_Transport__Mailbox__Public_Folder_Installation | PerformanceCollection | True | Microsoft Forefront Server Security Scan | Total Messages Tagged | 1800 | 0 | | False | | | True | |
 | ScanTransportCountMessageTag | | ScanTransportCountMessageTag_4_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Hub_Transport_Installation | PerformanceCollection | True | Microsoft Forefront Server Security Scan | Total Messages Tagged | 1800 | 0 | | False | | | True | |
 | ScanTransportEngineMapE | | ScanTransportEngineMapE_1_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Edge_Transport_Installation | EventCollection | True | | | 0 | 5030 | FSCTransportScanner | True | Error | Normal | True | Application |
 | ScanTransportEngineMapE | | ScanTransportEngineMapE_3_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Hub_Transport__Mailbox__Public_Folder_Installation | EventCollection | True | | | 0 | 5030 | FSCTransportScanner | True | Error | Normal | True | Application |
 | ScanTransportEngineMapE | | ScanTransportEngineMapE_4_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Hub_Transport_Installation | EventCollection | True | | | 0 | 5030 | FSCTransportScanner | True | Error | Normal | True | Application |
 | ScanTransportRateAttachmentScan | | ScanTransportRateAttachmentScan_1_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Edge_Transport_Installation | PerformanceCollection | True | Microsoft Forefront Server Security Scan | Attachments Scanned Rate | 300 | 0 | | False | | | True | |
 | ScanTransportRateAttachmentScan | | ScanTransportRateAttachmentScan_3_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Hub_Transport__Mailbox__Public_Folder_Installation | PerformanceCollection | True | Microsoft Forefront Server Security Scan | Attachments Scanned Rate | 300 | 0 | | False | | | True | |
 | ScanTransportRateAttachmentScan | | ScanTransportRateAttachmentScan_4_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Hub_Transport_Installation | PerformanceCollection | True | Microsoft Forefront Server Security Scan | Attachments Scanned Rate | 300 | 0 | | False | | | True | |
 | ScanTransportTimeoutE | | ScanTransportTimeoutE_1_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Edge_Transport_Installation | EventCollection | True | | | 0 | 5015 | FSCController | True | Warning | Normal | True | Application |
 | ScanTransportTimeoutE | | ScanTransportTimeoutE_3_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Hub_Transport__Mailbox__Public_Folder_Installation | EventCollection | True | | | 0 | 5015 | FSCController | True | Warning | Normal | True | Application |
 | ScanTransportTimeoutE | | ScanTransportTimeoutE_4_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Hub_Transport_Installation | EventCollection | True | | | 0 | 5015 | FSCController | True | Warning | Normal | True | Application |
 | SelectedEngineUpdates | | SelectedEngineUpdates_2_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___All_Servers_Installation | EventCollection | True | | | 0 | 7001 | Microsoft Forefront Security | True | Warning | Normal | True | Application |
 | ServicesExchangeStoreStartFailE | | ServicesExchangeStoreStartFailE_3_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Hub_Transport__Mailbox__Public_Folder_Installation | EventCollection | True | | | 0 | 0 | Service Control Manager | True | Error | Normal | True | System |
 | ServicesExchangeStoreStartFailE | | ServicesExchangeStoreStartFailE_5_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Mailbox__Public_Folder_Installation | EventCollection | True | | | 0 | 0 | Service Control Manager | True | Error | Normal | True | System |
 | ServicesExchangeStoreTerminateE | | ServicesExchangeStoreTerminateE_3_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Hub_Transport__Mailbox__Public_Folder_Installation | EventCollection | True | | | 0 | 7034 | Service Control Manager | True | Error | Normal | True | System |
 | ServicesExchangeStoreTerminateE | | ServicesExchangeStoreTerminateE_5_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Mailbox__Public_Folder_Installation | EventCollection | True | | | 0 | 7034 | Service Control Manager | True | Error | Normal | True | System |
 | ServicesForefrontIMCStartFail | | ServicesForefrontIMCStartFail_1_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Edge_Transport_Installation | EventCollection | True | | | 0 | 0 | Service Control Manager | True | Error | Normal | True | System |
 | ServicesForefrontIMCStartFail | | ServicesForefrontIMCStartFail_3_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Hub_Transport__Mailbox__Public_Folder_Installation | EventCollection | True | | | 0 | 0 | Service Control Manager | True | Error | Normal | True | System |
 | ServicesForefrontIMCStartFail | | ServicesForefrontIMCStartFail_4_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Hub_Transport_Installation | EventCollection | True | | | 0 | 0 | Service Control Manager | True | Error | Normal | True | System |
 | ServicesForefrontIMCStart | | ServicesForefrontIMCStart_1_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Edge_Transport_Installation | EventCollection | True | | | 0 | 1002 | FSEIMC | False | | | True | Application |
 | ServicesForefrontIMCStart | | ServicesForefrontIMCStart_3_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Hub_Transport__Mailbox__Public_Folder_Installation | EventCollection | True | | | 0 | 1002 | FSEIMC | False | | | True | Application |
 | ServicesForefrontIMCStart | | ServicesForefrontIMCStart_4_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Hub_Transport_Installation | EventCollection | True | | | 0 | 1002 | FSEIMC | False | | | True | Application |
 | ServicesForefrontMonitor StateMonitor | | ServicesForefrontMonitor_StateMonitor_2_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___All_Servers_Installation | EventCollection | True | | | 0 | 0 | | True | Error | Low | True | |
 | ServicesForefrontService StateMonitor | | ServicesForefrontService_StateMonitor_2_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___All_Servers_Installation | EventCollection | True | | | 0 | 0 | | True | Error | Low | True | |
 | ServicesStoreFailE | | ServicesStoreFailE_3_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Hub_Transport__Mailbox__Public_Folder_Installation | EventCollection | True | | | 0 | 1009 | FSCMonitor | True | Error | Normal | True | Application |
 | ServicesStoreFailE | | ServicesStoreFailE_5_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Mailbox__Public_Folder_Installation | EventCollection | True | | | 0 | 1009 | FSCMonitor | True | Error | Normal | True | Application |
 | ServicesStoreStartE | | ServicesStoreStartE_3_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Hub_Transport__Mailbox__Public_Folder_Installation | EventCollection | True | | | 0 | 1007 | FSCMonitor | False | | | True | Application |
 | ServicesStoreStartE | | ServicesStoreStartE_5_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Mailbox__Public_Folder_Installation | EventCollection | True | | | 0 | 1007 | FSCMonitor | False | | | True | Application |
 | ServicesStoreStopE | | ServicesStoreStopE_3_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Hub_Transport__Mailbox__Public_Folder_Installation | EventCollection | True | | | 0 | 1008 | FSCMonitor | False | | | True | Application |
 | ServicesStoreStopE | | ServicesStoreStopE_5_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Mailbox__Public_Folder_Installation | EventCollection | True | | | 0 | 1008 | FSCMonitor | False | | | True | Application |
 | ServicesTransportStartFail | | ServicesTransportStartFail_1_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Edge_Transport_Installation | EventCollection | True | | | 0 | 0 | Service Control Manager | True | Error | Normal | True | System |
 | ServicesTransportStartFail | | ServicesTransportStartFail_3_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Hub_Transport__Mailbox__Public_Folder_Installation | EventCollection | True | | | 0 | 0 | Service Control Manager | True | Error | Normal | True | System |
 | ServicesTransportStartFail | | ServicesTransportStartFail_4_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Hub_Transport_Installation | EventCollection | True | | | 0 | 0 | Service Control Manager | True | Error | Normal | True | System |
 | ServicesTransportStart | | ServicesTransportStart_1_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Edge_Transport_Installation | EventCollection | True | | | 0 | 1001 | MSExchangeTransport | False | | | True | Application |
 | ServicesTransportStart | | ServicesTransportStart_3_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Hub_Transport__Mailbox__Public_Folder_Installation | EventCollection | True | | | 0 | 1001 | MSExchangeTransport | False | | | True | Application |
 | ServicesTransportStart | | ServicesTransportStart_4_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Hub_Transport_Installation | EventCollection | True | | | 0 | 1001 | MSExchangeTransport | False | | | True | Application |
 | ServicesTransportStop | | ServicesTransportStop_1_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Edge_Transport_Installation | EventCollection | True | | | 0 | 1003 | MSExchangeTransport | False | | | True | Application |
 | ServicesTransportStop | | ServicesTransportStop_3_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Hub_Transport__Mailbox__Public_Folder_Installation | EventCollection | True | | | 0 | 1003 | MSExchangeTransport | False | | | True | Application |
 | ServicesTransportStop | | ServicesTransportStop_4_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Hub_Transport_Installation | EventCollection | True | | | 0 | 1003 | MSExchangeTransport | False | | | True | Application |
 | ServiceTerminate | | ServiceTerminate_1_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Edge_Transport_Installation | EventCollection | True | | | 0 | 0 | FSCController | True | Error | Normal | True | Application |
 | ServiceTerminate | | ServiceTerminate_3_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Hub_Transport__Mailbox__Public_Folder_Installation | EventCollection | True | | | 0 | 0 | FSCController | True | Error | Normal | True | Application |
 | ServiceTerminate | | ServiceTerminate_4_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Hub_Transport_Installation | EventCollection | True | | | 0 | 0 | FSCController | True | Error | Normal | True | Application |
 | TransportConnected | | TransportConnected_1_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Edge_Transport_Installation | EventCollection | True | | | 0 | 7025 | Microsoft Forefront Security | True | Error | Normal | True | Application |
 | TransportConnected | | TransportConnected_3_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Hub_Transport__Mailbox__Public_Folder_Installation | EventCollection | True | | | 0 | 7025 | Microsoft Forefront Security | True | Error | Normal | True | Application |
 | TransportConnected | | TransportConnected_4_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Hub_Transport_Installation | EventCollection | True | | | 0 | 7025 | Microsoft Forefront Security | True | Error | Normal | True | Application |
 | TransportEnginesInitialized | | TransportEnginesInitialized_1_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Edge_Transport_Installation | EventCollection | True | | | 0 | 7009 | Microsoft Forefront Security | True | Error | Normal | True | Application |
 | TransportEnginesInitialized | | TransportEnginesInitialized_3_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Hub_Transport__Mailbox__Public_Folder_Installation | EventCollection | True | | | 0 | 7009 | Microsoft Forefront Security | True | Error | Normal | True | Application |
 | TransportEnginesInitialized | | TransportEnginesInitialized_4_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Hub_Transport_Installation | EventCollection | True | | | 0 | 7009 | Microsoft Forefront Security | True | Error | Normal | True | Application |
 | TransportScanJobEnabledE | | TransportScanJobEnabledE_1_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Edge_Transport_Installation | EventCollection | True | | | 0 | 7014 | Microsoft Forefront Security | True | Error | Normal | True | Application |
 | TransportScanJobEnabledE | | TransportScanJobEnabledE_3_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Hub_Transport__Mailbox__Public_Folder_Installation | EventCollection | True | | | 0 | 7014 | Microsoft Forefront Security | True | Error | Normal | True | Application |
 | TransportScanJobEnabledE | | TransportScanJobEnabledE_4_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Hub_Transport_Installation | EventCollection | True | | | 0 | 7014 | Microsoft Forefront Security | True | Error | Normal | True | Application |
 | TransportScanJobEnabledW | | TransportScanJobEnabledW_1_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Edge_Transport_Installation | EventCollection | True | | | 0 | 0 | Microsoft Forefront Security | True | Warning | Normal | True | Application |
 | TransportScanJobEnabledW | | TransportScanJobEnabledW_3_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Hub_Transport__Mailbox__Public_Folder_Installation | EventCollection | True | | | 0 | 0 | Microsoft Forefront Security | True | Warning | Normal | True | Application |
 | TransportScanJobEnabledW | | TransportScanJobEnabledW_4_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Hub_Transport_Installation | EventCollection | True | | | 0 | 0 | Microsoft Forefront Security | True | Warning | Normal | True | Application |
 | TransportScanProcessStateE | | TransportScanProcessStateE_1_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Edge_Transport_Installation | EventCollection | True | | | 0 | 7023 | Microsoft Forefront Security | True | Error | Normal | True | Application |
 | TransportScanProcessStateE | | TransportScanProcessStateE_3_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Hub_Transport__Mailbox__Public_Folder_Installation | EventCollection | True | | | 0 | 7023 | Microsoft Forefront Security | True | Error | Normal | True | Application |
 | TransportScanProcessStateE | | TransportScanProcessStateE_4_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Hub_Transport_Installation | EventCollection | True | | | 0 | 7023 | Microsoft Forefront Security | True | Error | Normal | True | Application |
 | TransportScanProcessStateW | | TransportScanProcessStateW_1_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Edge_Transport_Installation | EventCollection | True | | | 0 | 7022 | Microsoft Forefront Security | True | Warning | Normal | True | Application |
 | TransportScanProcessStateW | | TransportScanProcessStateW_3_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Hub_Transport__Mailbox__Public_Folder_Installation | EventCollection | True | | | 0 | 7022 | Microsoft Forefront Security | True | Warning | Normal | True | Application |
 | TransportScanProcessStateW | | TransportScanProcessStateW_4_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___Hub_Transport_Installation | EventCollection | True | | | 0 | 7022 | Microsoft Forefront Security | True | Warning | Normal | True | Application |
 | UpdateFailGeneric | | UpdateFailGeneric_2_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___All_Servers_Installation | EventCollection | True | | | 0 | 0 | GetEngineFiles | True | Error | Low | True | Application |
 | UpdateSuccess | | UpdateSuccess_2_Rule | FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___All_Servers_Installation | Custom | True | | | 0 | 0 | | False | | | True | |