| DisplayName | Description | ID | Target | Category | Enabled | Instance Name | Counter Name | Frequency | Event_ID | Event Source | Alert Generate | Alert Severity | Alert Priority | Remotable | Event Log |
| Collect AppLocker Events | This rule collects events in the AppLocker event log and sends them to the cloud | Microsoft.SystemCenter.CollectAppLockerEvent | Microsoft.Windows.Computer | EventCollection | False | | | 0 | 0 | | False | | | True | Microsoft-Windows-AppLocker/EXE and DLL |
| Collect Security Events | This rule collects events in the Security event log and sends them to the cloud | Microsoft.SystemCenter.CollectSecurityEvent | Microsoft.Windows.Computer | EventCollection | False | | | 0 | 0 | | False | | | True | Security |
| Optimize Event Module Batch Size | This rule increases how many events the Windows event module processes at one time. This will improve performance by processing by causing fewer batches to be generated. | Microsoft.SystemCenter.OptimizeEventModuleBatchSize | Microsoft.Windows.Computer | Custom | False | | | 0 | 0 | | False | | | False | |