| DisplayName | Description | ID | Target | Category | Enabled | Instance Name | Counter Name | Frequency | Event_ID | Event Source | Alert Generate | Alert Severity | Alert Priority | Remotable | Event Log |
| Microsoft Azure Security Center policies runner | Enable all the required policies for Azure Security Center detection engine | Microsoft.RomeDetection.EnableAscPolicies | Microsoft.Windows.Computer | Custom | False | | | 0 | 0 | | False | | | False | |
| Monitoring - Microsoft Azure Security Center policies runner | Collects error events from Microsoft Azure Security Center policies runner rules for monitoring purposes | Microsoft.RomeDetection.EnableAscPolicies.CollectRuleErrors | Microsoft.Windows.Computer | Custom | False | | | 0 | 0 | | False | | | False | |
| Collect Security Events | This rule collects events in the Security event log and sends them to the cloud | Microsoft.SystemCenter.CollectThreatDetectionSecurityEvent | Microsoft.Windows.Computer | EventCollection | False | | | 0 | 0 | | False | | | True | Security |
| Collect System Events | This rule collects events in the System event log and sends them to the cloud | Microsoft.SystemCenter.CollectThreatDetectionSystemEvent | Microsoft.Windows.Computer | EventCollection | False | | | 0 | 0 | | False | | | True | System |
| Monitoring - Threat detection security events | Collects error events from threat detection security event rules for monitoring purposes | Microsoft.SystemCenter.ThreatDetection.CollectRuleErrors.SecurityEvent | Microsoft.Windows.Computer | Custom | False | | | 0 | 0 | | False | | | False | |
| Monitoring - Threat detection system events | Collects error events from threat detection system event rules for monitoring purposes | Microsoft.SystemCenter.ThreatDetection.CollectRuleErrors.SystemEvent | Microsoft.Windows.Computer | Custom | False | | | 0 | 0 | | False | | | False | |