| DisplayName | Description | ID | Target | Category | Enabled | Instance Name | Counter Name | Frequency | Event_ID | Event Source | Alert Generate | Alert Severity | Alert Priority | Remotable | Event Log |
| Process Monitoring: Health State Collection | This rule collects information about the health state of the processes. | Microsoft.Windows.Server.10.0.Process.HealthState.Collection | Microsoft.Windows.Server.10.0.ProcessMonitoring.ProcessSeed | Custom | False | | | 0 | 0 | | False | | | False | |
| Process Monitoring: Process Health State Subscription | This rule saves Process Health State information to the SCOM data warehouse. To start information collection, make sure that “Process Monitoring: Health State Collection” rule is enabled. | Microsoft.Windows.Server.10.0.Process.HealthStateSubscription.Rule | Microsoft.SystemCenter.HealthService | Custom | False | | | 0 | 0 | | False | | | True | |
| Process Monitoring: Performance Collection | This rule collects information about the processes' performance metrics. | Microsoft.Windows.Server.10.0.Process.PerfMetrics.Collection | Microsoft.Windows.Server.10.0.ProcessMonitoring.ProcessSeed | Custom | False | | | 0 | 0 | | False | | | False | |
| Process Monitoring: Process Performance Metric Subscription | This rule saves Process Performance Metric information to the SCOM data warehouse. To start information collection, make sure that “Process Monitoring: Performance Collection” rule is enabled. | Microsoft.Windows.Server.10.0.Process.PerfMetricsSubscription.Rule | Microsoft.SystemCenter.HealthService | Custom | False | | | 0 | 0 | | False | | | True | |
| Process Monitoring: Network Port State Collection | This rule collects information about Network Port State. | Microsoft.Windows.Server.10.0.Process.Ports.Collection | Microsoft.Windows.Server.10.0.ProcessMonitoring.ProcessSeed | Custom | False | | | 0 | 0 | | False | | | False | |
| Process Monitoring: Process Network Port Subscription | This rule saves Process Network Port information to the SCOM data warehouse. To start information collection, make sure that “Process Monitoring: Network Port State Collection” rule is enabled. | Microsoft.Windows.Server.10.0.Process.PortSubscription.Rule | Microsoft.SystemCenter.HealthService | Custom | False | | | 0 | 0 | | False | | | True | |
| Process Monitoring: Number of Processes Collection | This rule collects the Number of Processes performance counter for Windows Server 2016 and above operating systems. | Microsoft.Windows.Server.10.0.ProcessCount.Collection | Microsoft.Windows.Server.10.0.ProcessMonitoring.ProcessSeed | PerformanceCollection | False | | | 0 | 0 | | False | | | True | |
| Process Monitoring: High Handle Count | This rule generates an alert when handle count increases too fast. | Microsoft.Windows.Server.10.0.ProcessHandleCount.Alert | Microsoft.Windows.Server.10.0.ProcessMonitoring.ProcessSeed | Custom | False | | | 0 | 0 | | False | | | True | |
| Process Monitoring: High Memory Percentage | This rule generates an alert when the memory percentage is too high. | Microsoft.Windows.Server.10.0.ProcessMemoryPercentage.Alert | Microsoft.Windows.Server.10.0.ProcessMonitoring.ProcessSeed | Custom | False | | | 0 | 0 | | False | | | True | |
| Process Monitoring: High Processor Time Percentage | This rule generates an alert when the percentage of processor time is too high. | Microsoft.Windows.Server.10.0.ProcessPercentProcessorTime.Alert | Microsoft.Windows.Server.10.0.ProcessMonitoring.ProcessSeed | Custom | False | | | 0 | 0 | | False | | | True | |