| DisplayName | Description | ID | Target | Category | Enabled | Instance Name | Counter Name | Frequency | Event_ID | Event Source | Alert Generate | Alert Severity | Alert Priority | Remotable | Event Log |
| Antigen Service Discovery | | Antigen_Service_Discovery_1_Rule | Microsoft.Antigen.v9.Antigen_For_SMTP_Installation | EventCollection | True | | | 0 | 0 | | False | | | True | |
| Antigen Service Discovery | | Antigen_Service_Discovery_2_Rule | Microsoft.Antigen.v9.Antigen_For_Exchange_Installation | EventCollection | True | | | 0 | 0 | | False | | | True | |
| OnVirusOutbreakAlert | | OnVirusOutbreakAlert_1_Rule | Microsoft.Antigen.v9.Antigen_For_SMTP_Installation | EventCollection | False | | | 0 | 0 | | True | Warning | Low | True | |
| ScanConfigDataAccess | | ScanConfigDataAccess_1_Rule | Microsoft.Antigen.v9.Antigen_For_SMTP_Installation | EventCollection | True | | | 0 | 0 | | True | Error | Low | True | |
| ScanConfigDataAccess | | ScanConfigDataAccess_2_Rule | Microsoft.Antigen.v9.Antigen_For_Exchange_Installation | EventCollection | True | | | 0 | 0 | | True | Error | Low | True | |
| ScanInternalError | | ScanInternalError_1_Rule | Microsoft.Antigen.v9.Antigen_For_SMTP_Installation | EventCollection | True | | | 0 | 0 | | True | Error | Low | True | |
| ScanInternalError | | ScanInternalError_2_Rule | Microsoft.Antigen.v9.Antigen_For_Exchange_Installation | EventCollection | True | | | 0 | 0 | | True | Error | Low | True | |
| ScanInternetAbort | | ScanInternetAbort_1_Rule | Microsoft.Antigen.v9.Antigen_For_SMTP_Installation | EventCollection | True | | | 0 | 0 | | True | Warning | Low | True | |
| ScanInternetAbort | | ScanInternetAbort_2_Rule | Microsoft.Antigen.v9.Antigen_For_Exchange_Installation | EventCollection | True | | | 0 | 0 | | True | Warning | Low | True | |
| ScanInternetCountAttachmentClean | | ScanInternetCountAttachmentClean_1_Rule | Microsoft.Antigen.v9.Antigen_For_SMTP_Installation | PerformanceCollection | True | Antigen Scan | Total Attachments Cleaned | 1800 | 0 | | False | | | True | |
| ScanInternetCountAttachmentClean | | ScanInternetCountAttachmentClean_2_Rule | Microsoft.Antigen.v9.Antigen_For_Exchange_Installation | PerformanceCollection | True | Antigen Scan | Total Attachments Cleaned | 1800 | 0 | | False | | | True | |
| ScanInternetCountAttachmentDetect | | ScanInternetCountAttachmentDetect_1_Rule | Microsoft.Antigen.v9.Antigen_For_SMTP_Installation | PerformanceCollection | True | Antigen Scan | Total Attachments Detected | 1800 | 0 | | False | | | True | |
| ScanInternetCountAttachmentDetect | | ScanInternetCountAttachmentDetect_2_Rule | Microsoft.Antigen.v9.Antigen_For_Exchange_Installation | PerformanceCollection | True | Antigen Scan | Total Attachments Detected | 1800 | 0 | | False | | | True | |
| ScanInternetCountAttachmentRemove | | ScanInternetCountAttachmentRemove_1_Rule | Microsoft.Antigen.v9.Antigen_For_SMTP_Installation | PerformanceCollection | True | Antigen Scan | Total Attachments Removed | 1800 | 0 | | False | | | True | |
| ScanInternetCountAttachmentRemove | | ScanInternetCountAttachmentRemove_2_Rule | Microsoft.Antigen.v9.Antigen_For_Exchange_Installation | PerformanceCollection | True | Antigen Scan | Total Attachments Removed | 1800 | 0 | | False | | | True | |
| ScanInternetCountAttachmentScan | | ScanInternetCountAttachmentScan_1_Rule | Microsoft.Antigen.v9.Antigen_For_SMTP_Installation | PerformanceCollection | True | Antigen Scan | Total Attachments Scanned | 1800 | 0 | | False | | | True | |
| ScanInternetCountAttachmentScan | | ScanInternetCountAttachmentScan_2_Rule | Microsoft.Antigen.v9.Antigen_For_Exchange_Installation | PerformanceCollection | True | Antigen Scan | Total Attachments Scanned | 1800 | 0 | | False | | | True | |
| ScanInternetCountMessageDetect | | ScanInternetCountMessageDetect_1_Rule | Microsoft.Antigen.v9.Antigen_For_SMTP_Installation | PerformanceCollection | True | Antigen Scan | Total Messages Detected | 1800 | 0 | | False | | | True | |
| ScanInternetCountMessageDetect | | ScanInternetCountMessageDetect_2_Rule | Microsoft.Antigen.v9.Antigen_For_Exchange_Installation | PerformanceCollection | True | Antigen Scan | Total Messages Detected | 1800 | 0 | | False | | | True | |
| ScanInternetCountMessagePurge | | ScanInternetCountMessagePurge_1_Rule | Microsoft.Antigen.v9.Antigen_For_SMTP_Installation | PerformanceCollection | True | Antigen Scan | Total Messages Purged | 1800 | 0 | | False | | | True | |
| ScanInternetCountMessagePurge | | ScanInternetCountMessagePurge_2_Rule | Microsoft.Antigen.v9.Antigen_For_Exchange_Installation | PerformanceCollection | True | Antigen Scan | Total Messages Purged | 1800 | 0 | | False | | | True | |
| ScanInternetCountMessageScan | | ScanInternetCountMessageScan_1_Rule | Microsoft.Antigen.v9.Antigen_For_SMTP_Installation | PerformanceCollection | True | Antigen Scan | Total Attachments Scanned | 1800 | 0 | | False | | | True | |
| ScanInternetCountMessageScan | | ScanInternetCountMessageScan_2_Rule | Microsoft.Antigen.v9.Antigen_For_Exchange_Installation | PerformanceCollection | True | Antigen Scan | Total Attachments Scanned | 1800 | 0 | | False | | | True | |
| ScanInternetCountMessageTag | | ScanInternetCountMessageTag_1_Rule | Microsoft.Antigen.v9.Antigen_For_SMTP_Installation | PerformanceCollection | True | Antigen Scan | Total Messages Tagged | 1800 | 0 | | False | | | True | |
| ScanInternetCountMessageTag | | ScanInternetCountMessageTag_2_Rule | Microsoft.Antigen.v9.Antigen_For_Exchange_Installation | PerformanceCollection | True | Antigen Scan | Total Messages Tagged | 1800 | 0 | | False | | | True | |
| ScanInternetDisabled | | ScanInternetDisabled_1_Rule | Microsoft.Antigen.v9.Antigen_For_SMTP_Installation | EventCollection | True | | | 0 | 2008 | AntigenInternet | True | Information | Low | True | Application |
| ScanInternetDisabled | | ScanInternetDisabled_2_Rule | Microsoft.Antigen.v9.Antigen_For_Exchange_Installation | EventCollection | True | | | 0 | 2008 | AntigenInternet | True | Information | Low | True | Application |
| ScanInternetEnabled | | ScanInternetEnabled_1_Rule | Microsoft.Antigen.v9.Antigen_For_SMTP_Installation | EventCollection | True | | | 0 | 2007 | AntigenInternet | False | | | True | Application |
| ScanInternetEnabled | | ScanInternetEnabled_2_Rule | Microsoft.Antigen.v9.Antigen_For_Exchange_Installation | EventCollection | True | | | 0 | 2007 | AntigenInternet | False | | | True | Application |
| ScanInternetEngineMap | | ScanInternetEngineMap_1_Rule | Microsoft.Antigen.v9.Antigen_For_SMTP_Installation | EventCollection | True | | | 0 | 5030 | AntigenInternet | True | Error | Low | True | Application |
| ScanInternetEngineMap | | ScanInternetEngineMap_2_Rule | Microsoft.Antigen.v9.Antigen_For_Exchange_Installation | EventCollection | True | | | 0 | 5030 | AntigenInternet | True | Error | Low | True | Application |
| ScanInternetInternalError | | ScanInternetInternalError_1_Rule | Microsoft.Antigen.v9.Antigen_For_SMTP_Installation | EventCollection | True | | | 0 | 4007 | ScanInternetSink | True | Error | Low | True | Application |
| ScanInternetInternalError | | ScanInternetInternalError_2_Rule | Microsoft.Antigen.v9.Antigen_For_Exchange_Installation | EventCollection | True | | | 0 | 4007 | ScanInternetSink | True | Error | Low | True | Application |
| ScanInternetProcessError | | ScanInternetProcessError_1_Rule | Microsoft.Antigen.v9.Antigen_For_SMTP_Installation | EventCollection | False | | | 0 | 0 | | True | Error | Low | True | |
| ScanInternetProcessError | | ScanInternetProcessError_2_Rule | Microsoft.Antigen.v9.Antigen_For_Exchange_Installation | EventCollection | False | | | 0 | 0 | | True | Error | Low | True | |
| ScanInternetProcessPoll | | ScanInternetProcessPoll_1_Rule | Microsoft.Antigen.v9.Antigen_For_SMTP_Installation | EventCollection | False | | | 0 | 0 | | False | | | True | |
| ScanInternetProcessPoll | | ScanInternetProcessPoll_2_Rule | Microsoft.Antigen.v9.Antigen_For_Exchange_Installation | EventCollection | False | | | 0 | 0 | | False | | | True | |
| ScanInternetRateAttachmentScan | | ScanInternetRateAttachmentScan_1_Rule | Microsoft.Antigen.v9.Antigen_For_SMTP_Installation | PerformanceCollection | True | Antigen Scan | Attachments Scanned Rate | 300 | 0 | | False | | | True | |
| ScanInternetRateAttachmentScan | | ScanInternetRateAttachmentScan_2_Rule | Microsoft.Antigen.v9.Antigen_For_Exchange_Installation | PerformanceCollection | True | Antigen Scan | Attachments Scanned Rate | 300 | 0 | | False | | | True | |
| ScanInternetSink | | ScanInternetSink_1_Rule | Microsoft.Antigen.v9.Antigen_For_SMTP_Installation | EventCollection | True | | | 0 | 4008 | AntigenSMTPSink | True | Warning | Low | True | Application |
| ScanInternetSink | | ScanInternetSink_2_Rule | Microsoft.Antigen.v9.Antigen_For_Exchange_Installation | EventCollection | True | | | 0 | 4008 | AntigenSMTPSink | True | Warning | Low | True | Application |
| ScanInternetTimeout | | ScanInternetTimeout_1_Rule | Microsoft.Antigen.v9.Antigen_For_SMTP_Installation | EventCollection | True | | | 0 | 0 | | True | Warning | Low | True | |
| ScanInternetTimeout | | ScanInternetTimeout_2_Rule | Microsoft.Antigen.v9.Antigen_For_Exchange_Installation | EventCollection | True | | | 0 | 0 | | True | Warning | Low | True | |
| ScanManualCountAttachmentClean | | ScanManualCountAttachmentClean_2_Rule | Microsoft.Antigen.v9.Antigen_For_Exchange_Installation | PerformanceCollection | True | Antigen Scan | Total Attachments Cleaned | 1800 | 0 | | False | | | True | |
| ScanManualCountAttachmentDetect | | ScanManualCountAttachmentDetect_2_Rule | Microsoft.Antigen.v9.Antigen_For_Exchange_Installation | PerformanceCollection | True | Antigen Scan | Total Attachments Detected | 1800 | 0 | | False | | | True | |
| ScanManualCountAttachmentRemove | | ScanManualCountAttachmentRemove_2_Rule | Microsoft.Antigen.v9.Antigen_For_Exchange_Installation | PerformanceCollection | True | Antigen Scan | Total Attachments Removed | 1800 | 0 | | False | | | True | |
| ScanManualCountAttachmentScan | | ScanManualCountAttachmentScan_2_Rule | Microsoft.Antigen.v9.Antigen_For_Exchange_Installation | PerformanceCollection | True | Antigen Scan | Total Attachments Scanned | 1800 | 0 | | False | | | True | |
| ScanManualCountMessageDetect | | ScanManualCountMessageDetect_2_Rule | Microsoft.Antigen.v9.Antigen_For_Exchange_Installation | PerformanceCollection | True | Antigen Scan | Total Messages Detected | 1800 | 0 | | False | | | True | |
| ScanManualCountMessageScan | | ScanManualCountMessageScan_2_Rule | Microsoft.Antigen.v9.Antigen_For_Exchange_Installation | PerformanceCollection | True | Antigen Scan | Total Messages Scanned | 1800 | 0 | | False | | | True | |
| ScanManualCountMessageTag | | ScanManualCountMessageTag_2_Rule | Microsoft.Antigen.v9.Antigen_For_Exchange_Installation | PerformanceCollection | True | Antigen Scan | Total Messages Tagged | 1800 | 0 | | False | | | True | |
| ScanManualEngineMapE | | ScanManualEngineMapE_2_Rule | Microsoft.Antigen.v9.Antigen_For_Exchange_Installation | EventCollection | True | | | 0 | 5030 | AntigenManual | True | Error | Low | True | Application |
| ScanManualFailedE | | ScanManualFailedE_2_Rule | Microsoft.Antigen.v9.Antigen_For_Exchange_Installation | EventCollection | True | | | 0 | 0 | AntigenManual | True | Error | Low | True | Application |
| ScanManualProblemE | | ScanManualProblemE_2_Rule | Microsoft.Antigen.v9.Antigen_For_Exchange_Installation | EventCollection | True | | | 0 | 0 | | True | Error | Low | True | |
| ScanManualRateAttachmentScan | | ScanManualRateAttachmentScan_2_Rule | Microsoft.Antigen.v9.Antigen_For_Exchange_Installation | PerformanceCollection | True | Antigen Scan | Attachments Scanned Rate | 300 | 0 | | False | | | True | |
| ScanManualStartedE | | ScanManualStartedE_2_Rule | Microsoft.Antigen.v9.Antigen_For_Exchange_Installation | EventCollection | True | | | 0 | 2002 | AntigenManual | False | | | True | Application |
| ScanManualStoppedE | | ScanManualStoppedE_2_Rule | Microsoft.Antigen.v9.Antigen_For_Exchange_Installation | EventCollection | True | | | 0 | 2005 | AntigenManual | False | | | True | Application |
| ScanRealtimeAbortE | | ScanRealtimeAbortE_2_Rule | Microsoft.Antigen.v9.Antigen_For_Exchange_Installation | EventCollection | True | | | 0 | 0 | | True | Warning | Low | True | |
| ScanRealtimeCountAttachmentClean | | ScanRealtimeCountAttachmentClean_2_Rule | Microsoft.Antigen.v9.Antigen_For_Exchange_Installation | PerformanceCollection | True | Antigen Scan | Total Attachments Cleaned | 1800 | 0 | | False | | | True | |
| ScanRealtimeCountAttachmentDetect | | ScanRealtimeCountAttachmentDetect_2_Rule | Microsoft.Antigen.v9.Antigen_For_Exchange_Installation | PerformanceCollection | True | Antigen Scan | Total Attachments Detected | 1800 | 0 | | False | | | True | |
| ScanRealtimeCountAttachmentRemove | | ScanRealtimeCountAttachmentRemove_2_Rule | Microsoft.Antigen.v9.Antigen_For_Exchange_Installation | PerformanceCollection | True | Antigen Scan | Total Attachments Removed | 1800 | 0 | | False | | | True | |
| ScanRealtimeCountAttachmentScan | | ScanRealtimeCountAttachmentScan_2_Rule | Microsoft.Antigen.v9.Antigen_For_Exchange_Installation | PerformanceCollection | True | Antigen Scan | Total Attachments Scanned | 1800 | 0 | | False | | | True | |
| ScanRealtimeCountMessageDetect | | ScanRealtimeCountMessageDetect_2_Rule | Microsoft.Antigen.v9.Antigen_For_Exchange_Installation | PerformanceCollection | True | Antigen Scan | Total Messages Detected | 1800 | 0 | | False | | | True | |
| ScanRealtimeCountMessagePurge | | ScanRealtimeCountMessagePurge_2_Rule | Microsoft.Antigen.v9.Antigen_For_Exchange_Installation | PerformanceCollection | True | Antigen Scan | Total Messages Purged | 1800 | 0 | | False | | | True | |
| ScanRealtimeCountMessageScan | | ScanRealtimeCountMessageScan_2_Rule | Microsoft.Antigen.v9.Antigen_For_Exchange_Installation | PerformanceCollection | True | Antigen Scan | Total Messages Scanned | 1800 | 0 | | False | | | True | |
| ScanRealtimeCountMessageTag | | ScanRealtimeCountMessageTag_2_Rule | Microsoft.Antigen.v9.Antigen_For_Exchange_Installation | PerformanceCollection | True | Antigen Scan | Total Messages Tagged | 1800 | 0 | | False | | | True | |
| ScanRealtimeDisabledE | | ScanRealtimeDisabledE_2_Rule | Microsoft.Antigen.v9.Antigen_For_Exchange_Installation | EventCollection | True | | | 0 | 2001 | AntigenRealtime | True | Information | Low | True | Application |
| ScanRealtimeEnabledE | | ScanRealtimeEnabledE_2_Rule | Microsoft.Antigen.v9.Antigen_For_Exchange_Installation | EventCollection | True | | | 0 | 2000 | AntigenRealtime | False | | | True | Application |
| ScanRealtimeEngineMapE | | ScanRealtimeEngineMapE_2_Rule | Microsoft.Antigen.v9.Antigen_For_Exchange_Installation | EventCollection | True | | | 0 | 5030 | AntigenRealtime | True | Error | Low | True | Application |
| ScanRealtimeProcessError | | ScanRealtimeProcessError_2_Rule | Microsoft.Antigen.v9.Antigen_For_Exchange_Installation | EventCollection | True | | | 0 | 0 | | True | Error | Low | True | |
| ScanRealtimeProcessPollE | | ScanRealtimeProcessPollE_2_Rule | Microsoft.Antigen.v9.Antigen_For_Exchange_Installation | EventCollection | False | | | 0 | 0 | | False | | | True | |
| ScanRealtimeProcessUsage | | ScanRealtimeProcessUsage_2_Rule | Microsoft.Antigen.v9.Antigen_For_Exchange_Installation | PerformanceCollection | True | Process | \% Processor Time | 300 | 0 | | False | | | True | |
| ScanRealtimeRateAttachmentScan | | ScanRealtimeRateAttachmentScan_2_Rule | Microsoft.Antigen.v9.Antigen_For_Exchange_Installation | PerformanceCollection | True | Antigen Scan | Attachments Scanned Rate | 300 | 0 | | False | | | True | |
| ScanRealtimeTimeoutE | | ScanRealtimeTimeoutE_2_Rule | Microsoft.Antigen.v9.Antigen_For_Exchange_Installation | EventCollection | True | | | 0 | 0 | | True | Warning | Low | True | |
| ScanUnapprovedVersionE | | ScanUnapprovedVersionE_2_Rule | Microsoft.Antigen.v9.Antigen_For_Exchange_Installation | EventCollection | True | | | 0 | 4005 | AntigenStore | True | Error | Low | True | Application |
| ServiceAntigenStoreTerminateE | | ServiceAntigenStoreTerminateE_2_Rule | Microsoft.Antigen.v9.Antigen_For_Exchange_Installation | EventCollection | True | | | 0 | 7034 | Service Control Manager | True | Error | Low | True | System |
| ServicesAntigenIMCStartFail | | ServicesAntigenIMCStartFail_1_Rule | Microsoft.Antigen.v9.Antigen_For_SMTP_Installation | EventCollection | True | | | 0 | 0 | Service Control Manager | True | Error | Low | True | System |
| ServicesAntigenIMCStartFail | | ServicesAntigenIMCStartFail_2_Rule | Microsoft.Antigen.v9.Antigen_For_Exchange_Installation | EventCollection | True | | | 0 | 0 | Service Control Manager | True | Error | Low | True | System |
| ServicesAntigenIMCStart | | ServicesAntigenIMCStart_1_Rule | Microsoft.Antigen.v9.Antigen_For_SMTP_Installation | EventCollection | True | | | 0 | 1002 | AntigenIMC | False | | | True | Application |
| ServicesAntigenIMCStart | | ServicesAntigenIMCStart_2_Rule | Microsoft.Antigen.v9.Antigen_For_Exchange_Installation | EventCollection | True | | | 0 | 1002 | AntigenIMC | False | | | True | Application |
| ServicesAntigenIMCStop | | ServicesAntigenIMCStop_1_Rule | Microsoft.Antigen.v9.Antigen_For_SMTP_Installation | EventCollection | True | | | 0 | 1003 | AntigenIMC | False | | | True | Application |
| ServicesAntigenIMCStop | | ServicesAntigenIMCStop_2_Rule | Microsoft.Antigen.v9.Antigen_For_Exchange_Installation | EventCollection | True | | | 0 | 1003 | AntigenIMC | False | | | True | Application |
| ServicesAntigenIMCTerminate | | ServicesAntigenIMCTerminate_1_Rule | Microsoft.Antigen.v9.Antigen_For_SMTP_Installation | EventCollection | True | | | 0 | 7034 | Service Control Manager | True | Error | Low | True | System |
| ServicesAntigenIMCTerminate | | ServicesAntigenIMCTerminate_2_Rule | Microsoft.Antigen.v9.Antigen_For_Exchange_Installation | EventCollection | True | | | 0 | 7034 | Service Control Manager | True | Error | Low | True | System |
| ServicesAntigenIMC StateMonitor | | ServicesAntigenIMC_StateMonitor_1_Rule | Microsoft.Antigen.v9.Antigen_For_SMTP_Installation | EventCollection | True | | | 0 | 0 | | True | Error | Low | True | |
| ServicesAntigenIMC StateMonitor | | ServicesAntigenIMC_StateMonitor_2_Rule | Microsoft.Antigen.v9.Antigen_For_Exchange_Installation | EventCollection | True | | | 0 | 0 | | True | Error | Low | True | |
| ServicesAntigenMonitor StateMonitor | | ServicesAntigenMonitor_StateMonitor_1_Rule | Microsoft.Antigen.v9.Antigen_For_SMTP_Installation | EventCollection | True | | | 0 | 0 | | True | Error | Low | True | |
| ServicesAntigenMonitor StateMonitor | | ServicesAntigenMonitor_StateMonitor_2_Rule | Microsoft.Antigen.v9.Antigen_For_Exchange_Installation | EventCollection | True | | | 0 | 0 | | True | Error | Low | True | |
| ServicesAntigenService StateMonitor | | ServicesAntigenService_StateMonitor_1_Rule | Microsoft.Antigen.v9.Antigen_For_SMTP_Installation | EventCollection | True | | | 0 | 0 | | True | Error | Low | True | |
| ServicesAntigenService StateMonitor | | ServicesAntigenService_StateMonitor_2_Rule | Microsoft.Antigen.v9.Antigen_For_Exchange_Installation | EventCollection | True | | | 0 | 0 | | True | Error | Low | True | |
| ServicesAntigenStoreEvent StateMonitor | | ServicesAntigenStoreEvent_StateMonitor_2_Rule | Microsoft.Antigen.v9.Antigen_For_Exchange_Installation | EventCollection | True | | | 0 | 0 | | True | Error | Low | True | |
| ServicesAntigenStoreStartE | | ServicesAntigenStoreStartE_2_Rule | Microsoft.Antigen.v9.Antigen_For_Exchange_Installation | EventCollection | True | | | 0 | 1005 | AntigenStore | False | | | True | Application |
| ServicesAntigenStoreStartFailE | | ServicesAntigenStoreStartFailE_2_Rule | Microsoft.Antigen.v9.Antigen_For_Exchange_Installation | EventCollection | True | | | 0 | 0 | Service Control Manager | True | Error | Low | True | System |
| ServicesAntigenStoreStopE | | ServicesAntigenStoreStopE_2_Rule | Microsoft.Antigen.v9.Antigen_For_Exchange_Installation | EventCollection | True | | | 0 | 1006 | AntigenStore | False | | | True | Application |
| ServicesAntigenStore StateMonitor | | ServicesAntigenStore_StateMonitor_2_Rule | Microsoft.Antigen.v9.Antigen_For_Exchange_Installation | EventCollection | True | | | 0 | 0 | | True | Error | Low | True | |
| ServicesSMTPStartE | | ServicesSMTPStartE_2_Rule | Microsoft.Antigen.v9.Antigen_For_Exchange_Installation | EventCollection | False | | | 0 | 332 | MSExchangeTransport | False | | | True | Application |
| ServicesSMTPStartFail | | ServicesSMTPStartFail_1_Rule | Microsoft.Antigen.v9.Antigen_For_SMTP_Installation | EventCollection | True | | | 0 | 0 | Service Control Manager | True | Error | Low | True | System |
| ServicesSMTPStartFail | | ServicesSMTPStartFail_2_Rule | Microsoft.Antigen.v9.Antigen_For_Exchange_Installation | EventCollection | True | | | 0 | 0 | Service Control Manager | True | Error | Low | True | System |
| ServicesSMTPStart | | ServicesSMTPStart_1_Rule | Microsoft.Antigen.v9.Antigen_For_SMTP_Installation | EventCollection | True | | | 0 | 7036 | Service Control Manager | False | | | True | System |
| ServicesSMTPStart | | ServicesSMTPStart_2_Rule | Microsoft.Antigen.v9.Antigen_For_Exchange_Installation | EventCollection | True | | | 0 | 7036 | Service Control Manager | False | | | True | System |
| ServicesSMTPStopE | | ServicesSMTPStopE_2_Rule | Microsoft.Antigen.v9.Antigen_For_Exchange_Installation | EventCollection | False | | | 0 | 333 | MSExchangeTransport | False | | | True | Application |
| ServicesSMTPStop | | ServicesSMTPStop_1_Rule | Microsoft.Antigen.v9.Antigen_For_SMTP_Installation | EventCollection | True | | | 0 | 7036 | Service Control Manager | False | | | True | System |
| ServicesSMTPStop | | ServicesSMTPStop_2_Rule | Microsoft.Antigen.v9.Antigen_For_Exchange_Installation | EventCollection | True | | | 0 | 7036 | Service Control Manager | False | | | True | System |
| ServicesSMTPTerminate | | ServicesSMTPTerminate_1_Rule | Microsoft.Antigen.v9.Antigen_For_SMTP_Installation | EventCollection | True | | | 0 | 0 | | True | Error | Low | True | |
| ServicesSMTPTerminate | | ServicesSMTPTerminate_2_Rule | Microsoft.Antigen.v9.Antigen_For_Exchange_Installation | EventCollection | True | | | 0 | 0 | | True | Error | Low | True | |
| ServicesStoreFailE | | ServicesStoreFailE_2_Rule | Microsoft.Antigen.v9.Antigen_For_Exchange_Installation | EventCollection | True | | | 0 | 1009 | AntigenMonitor | True | Error | Low | True | Application |
| ServicesStoreStartE | | ServicesStoreStartE_2_Rule | Microsoft.Antigen.v9.Antigen_For_Exchange_Installation | EventCollection | True | | | 0 | 1007 | AntigenMonitor | False | | | True | Application |
| ServicesStoreStopE | | ServicesStoreStopE_2_Rule | Microsoft.Antigen.v9.Antigen_For_Exchange_Installation | EventCollection | True | | | 0 | 1008 | AntigenMonitor | False | | | True | Application |
| UpdateFailDisable | | UpdateFailDisable_1_Rule | Microsoft.Antigen.v9.Antigen_For_SMTP_Installation | EventCollection | True | | | 0 | 6014 | GetEngineFiles | True | Error | Low | True | Application |
| UpdateFailDisable | | UpdateFailDisable_2_Rule | Microsoft.Antigen.v9.Antigen_For_Exchange_Installation | EventCollection | True | | | 0 | 6014 | GetEngineFiles | True | Error | Low | True | Application |
| UpdateFailGeneric | | UpdateFailGeneric_1_Rule | Microsoft.Antigen.v9.Antigen_For_SMTP_Installation | EventCollection | True | | | 0 | 0 | GetEngineFiles | True | Error | Low | True | Application |
| UpdateFailGeneric | | UpdateFailGeneric_2_Rule | Microsoft.Antigen.v9.Antigen_For_Exchange_Installation | EventCollection | True | | | 0 | 0 | GetEngineFiles | True | Error | Low | True | Application |
| UpdateFailTimeout | | UpdateFailTimeout_1_Rule | Microsoft.Antigen.v9.Antigen_For_SMTP_Installation | EventCollection | True | | | 0 | 0 | | True | Warning | Low | True | |
| UpdateFailTimeout | | UpdateFailTimeout_2_Rule | Microsoft.Antigen.v9.Antigen_For_Exchange_Installation | EventCollection | True | | | 0 | 0 | | True | Warning | Low | True | |
| UpdateRollbackFail | | UpdateRollbackFail_1_Rule | Microsoft.Antigen.v9.Antigen_For_SMTP_Installation | EventCollection | True | | | 0 | 6016 | GetEngineFiles | True | Error | Low | True | Application |
| UpdateRollbackFail | | UpdateRollbackFail_2_Rule | Microsoft.Antigen.v9.Antigen_For_Exchange_Installation | EventCollection | True | | | 0 | 6016 | GetEngineFiles | True | Error | Low | True | Application |
| UpdateSuccessful | | UpdateSuccessful_1_Rule | Microsoft.Antigen.v9.Antigen_For_SMTP_Installation | EventCollection | True | | | 0 | 2012 | GetEngineFiles | False | | | True | Application |
| UpdateSuccessful | | UpdateSuccessful_2_Rule | Microsoft.Antigen.v9.Antigen_For_Exchange_Installation | EventCollection | True | | | 0 | 2012 | GetEngineFiles | False | | | True | Application |
| UpdateSuccess | | UpdateSuccess_1_Rule | Microsoft.Antigen.v9.Antigen_For_SMTP_Installation | EventCollection | True | | | 0 | 2012 | GetEngineFiles | False | | | True | Application |
| UpdateSuccess | | UpdateSuccess_2_Rule | Microsoft.Antigen.v9.Antigen_For_Exchange_Installation | EventCollection | True | | | 0 | 2012 | GetEngineFiles | False | | | True | Application |