All Rules in Squadra.secRMMCentral Management Pack

	DisplayName	Description	ID	Target	Category	Enabled	Instance Name	Counter Name	Frequency	Event_ID	Event Source	Alert Generate	Alert Severity	Alert Priority	Remotable	Event Log
	secRMM AllowBitLockerOnlyEventOnline	A 'Removable Media' device was plugged into the computer but it was not BitLocker protected. Bringing the device online failed.	Squadra.secRMM.AllowBitLockerOnlyEventOnline	Squadra.secRMMCentral.Event	Alert	True			0	0		True	Error	High	True	secRMMCentral
	secRMM AllowBitLockerOnlyEventWrite	An attempt was made to copy a file to a 'Removable Media' device that is not BitLocker protected.	Squadra.secRMM.AllowBitLockerOnlyEventWrite	Squadra.secRMMCentral.Event	Alert	True			0	0		True	Error	High	True	secRMMCentral
	secRMM AllowedDirectoriesAuthorizationFailure	A user attempted to write a file(s) to a 'Removable Media' device from a directory location that was not authorized. The write attempt failed.	Squadra.secRMM.AllowedDirectoriesAuthorizationFailure	Squadra.secRMMCentral.Event	Alert	True			0	0		True	Error	High	True	secRMMCentral
	secRMM AllowedFileExtensionsAuthorizationFailure	A user attempted to write a file(s) to a 'Removable Media' device but the file extension was not authorized. The write attempt failed.	Squadra.secRMM.AllowedFileExtensionsAuthorizationFailure	Squadra.secRMMCentral.Event	Alert	True			0	0		True	Error	High	True	secRMMCentral
	secRMM AllowedInternalIdAuthorizationFailureOnline	A 'Removable Media' device was plugged into the computer but the internal Id of the device was not authorized. Bringing the device online failed.	Squadra.secRMM.AllowedInternalIdAuthorizationFailureOnline	Squadra.secRMMCentral.Event	Alert	True			0	0		True	Error	High	True	secRMMCentral
	secRMM AllowedInternalIdAuthorizationFailureWrite	A user attempted to write a file(s) to a 'Removable Media' device but the internal Id of the device was not authorized. The write attempt failed.	Squadra.secRMM.AllowedInternalIdAuthorizationFailureWrite	Squadra.secRMMCentral.Event	Alert	True			0	0		True	Error	High	True	secRMMCentral
	secRMM AllowRMSFilesOnly	An attempt was made to copy a file to a 'Removable Media' device where the file being copied was not Microsoft RMS protected.	Squadra.secRMM.AllowRMSFilesOnly	Squadra.secRMMCentral.Event	Alert	True			0	0		True	Error	High	True	secRMMCentral
	secRMM BlockCdDvdWritesEventOnline	A CD/DVD disc was plugged into the computer but writing to CD/DVD is being blocked. Bringing the device online failed.	Squadra.secRMM.BlockCdDvdWritesEventOnline	Squadra.secRMMCentral.Event	Alert	True			0	0		True	Error	High	True	secRMMCentral
	secRMM BlockCdDvdWritesEventWrite	An attempt was made to copy a file to a CD/DVD disc but writing to CD/DVD is being blocked.	Squadra.secRMM.BlockCdDvdWritesEventWrite	Squadra.secRMMCentral.Event	Alert	True			0	0		True	Error	High	True	secRMMCentral
	secRMM BlockProgramsOnDevice	An attempt was made to execute a program or macro from a 'Removable Media' device.	Squadra.secRMM.BlockProgramsOnDevice	Squadra.secRMMCentral.Event	Alert	True			0	0		True	Error	High	True	secRMMCentral
	secRMM Configuration Changed	A secRMM configuration was changed	Squadra.secRMM.ConfigurationChanged	Squadra.secRMMCentral.Event	Alert	True			0	0		True	Warning	Normal	True	secRMMCentral
	secRMM External Message	An external message generated for secRMM (ex: Log cleared).	Squadra.secRMM.External	Squadra.secRMMCentral.Event	Notification	True			0	0		True	Information	Normal	True	secRMMCentral
	secRMM DeviceFileWriteStart	A file write operation to a 'Removable Media' device has started.	Squadra.secRMM.FileWriteStart	Squadra.secRMMCentral.Event	Alert	True			0	0		True	Warning	Normal	True	secRMMCentral
	secRMM DeviceFileWritten	A file was written to a 'Removable Media' device.	Squadra.secRMM.FileWritten	Squadra.secRMMCentral.Event	Alert	True			0	0		True	Warning	Normal	True	secRMMCentral
	secRMM InvalidLicense	secRMM is installed but does not have a valid license.	Squadra.secRMM.InvalidLicense	Squadra.secRMMCentral.Event	Alert	True			0	0		True	Warning	Normal	True	secRMMCentral
	secRMM ProgramAuthorizationFailure	A user attempted to write a file(s) to a 'Removable Media' device but was not authorized because the program used to perform the write operation was not authorized. The write attempt failed.	Squadra.secRMM.ProgramAuthorizationFailure	Squadra.secRMMCentral.Event	Alert	True			0	0		True	Error	High	True	secRMMCentral
	secRMM Property Changed	A secRMM property was changed	Squadra.secRMM.PropertyChanged	Squadra.secRMMCentral.Event	Alert	True			0	0		True	Warning	Normal	True	secRMMCentral
	secRMM DeviceOffline	A 'Removable Media' device has gone offline (i.e. removed from the computer).	Squadra.secRMM.RMMDeviceOffline	Squadra.secRMMCentral.Event	Alert	True			0	0		True	Warning	Normal	True	secRMMCentral
	secRMM DeviceOnline	A 'Removable Media' device has come online (i.e. plugged into the computer).	Squadra.secRMM.RMMDeviceOnline	Squadra.secRMMCentral.Event	Alert	True			0	0		True	Warning	Normal	True	secRMMCentral
	secRMM SafeCopy PreApproval	An end-user is requesting permission to use the secRMM SafeCopy program. An approver needs to satisfy the request.	Squadra.secRMM.SafeCopyPreApprovalRequest	Squadra.secRMMCentral.Event	Notification	True			0	0		True	Information	Normal	True	secRMMCentral
	secRMM SerialNumberAuthorizationFailureOnline	A 'Removable Media' device was plugged into the computer but the Serial Number of the 'Removable Media' device was not authorized. Bringing the device online failed.	Squadra.secRMM.SerialNumberAuthorizationFailureOnline	Squadra.secRMMCentral.Event	Alert	True			0	0		True	Error	High	True	secRMMCentral
	secRMM SerialNumberAuthorizationFailureWrite	A user attempted to write a file(s) to a 'Removable Media' device but the Serial Number of the 'Removable Media' device was not authorized. The write attempt failed.	Squadra.secRMM.SerialNumberAuthorizationFailureWrite	Squadra.secRMMCentral.Event	Alert	True			0	0		True	Error	High	True	secRMMCentral
	secRMM UnknownSourceFailure	A user attempted to write a file(s) to a 'Removable Media' device but the source file could not be determined. The write attempt failed.	Squadra.secRMM.UnknownSourceFailure	Squadra.secRMMCentral.Event	Alert	True			0	0		True	Error	High	True	secRMMCentral
	secRMM UserAuthorizationFailureOnline	A 'Removable Media' device was plugged into the computer but no user is logged in that is authorized to use the Removable Media. Bringing the device online failed.	Squadra.secRMM.UserAuthorizationFailureOnline	Squadra.secRMMCentral.Event	Alert	True			0	0		True	Error	High	True	secRMMCentral
	secRMM UserAuthorizationFailureWrite	A user attempted to write a file(s) to a 'Removable Media' device but was not authorized. The write attempt failed.	Squadra.secRMM.UserAuthorizationFailureWrite	Squadra.secRMMCentral.Event	Alert	True			0	0		True	Error	High	True	secRMMCentral