All Rules in Trend.Micro.ScanMail.for.Microsoft.Exchange Management Pack

	DisplayName	Description	ID	Target	Category	Enabled	Instance Name	Counter Name	Frequency	Event_ID	Event Source	Alert Generate	Alert Severity	Alert Priority	Remotable	Event Log
	Attachment Blocking Outbreak Alert		Attachment_Blocking_Outbreak_Alert_1_Rule	Trend.Micro.ScanMail.for.Microsoft.Exchange.Trend_Micro_ScanMail_for_Microsoft_Exchange_Installation	EventCollection	True			0	259	Trend Micro ScanMail for Microsoft Exchange	True	Warning	High	True	Application
	Collect event tracking log		Collect_event_tracking_log_1_Rule	Trend.Micro.ScanMail.for.Microsoft.Exchange.Trend_Micro_ScanMail_for_Microsoft_Exchange_Installation	EventCollection	True			0	0		False			True	Application
	Each time the Virtual Analyzer was recovered		Each_time_the_Deep_Discovery_Advisor_server_was_recovered_1_Rule	Trend.Micro.ScanMail.for.Microsoft.Exchange.Trend_Micro_ScanMail_for_Microsoft_Exchange_Installation	EventCollection	True			0	28682	Trend Micro ScanMail for Microsoft Exchange	True	Information	Normal	True	Application
	Each time the Virtual Analyzer was unavailable		Each_time_the_Deep_Discovery_Advisor_server_was_unavailable_1_Rule	Trend.Micro.ScanMail.for.Microsoft.Exchange.Trend_Micro_ScanMail_for_Microsoft_Exchange_Installation	EventCollection	True			0	28681	Trend Micro ScanMail for Microsoft Exchange	True	Warning	Normal	True	Application
	Last update time is older than specified time		Last_update_time_is_older_than_specified_time_1_Rule	Trend.Micro.ScanMail.for.Microsoft.Exchange.Trend_Micro_ScanMail_for_Microsoft_Exchange_Installation	EventCollection	True			0	18	Trend Micro ScanMail for Microsoft Exchange	True	Warning	Normal	True	Application
	Manual scan tasks were successful		Manual_scan_tasks_were_successful_1_Rule	Trend.Micro.ScanMail.for.Microsoft.Exchange.Trend_Micro_ScanMail_for_Microsoft_Exchange_Installation	EventCollection	True			0	19	Trend Micro ScanMail for Microsoft Exchange	True	Information	Low	True	Application
	Manual scan tasks were unsuccessful		Manual_scan_tasks_were_unsuccessful_1_Rule	Trend.Micro.ScanMail.for.Microsoft.Exchange.Trend_Micro_ScanMail_for_Microsoft_Exchange_Installation	EventCollection	True			0	20	Trend Micro ScanMail for Microsoft Exchange	True	Error	Normal	True	Application
	Manual/Scheduled scan time exceeds		Manual_Scheduled_scan_time_exceeds_1_Rule	Trend.Micro.ScanMail.for.Microsoft.Exchange.Trend_Micro_ScanMail_for_Microsoft_Exchange_Installation	EventCollection	True			0	21	Trend Micro ScanMail for Microsoft Exchange	True	Warning	Normal	True	Application
	Manual update was successful		Manual_update_was_successful_1_Rule	Trend.Micro.ScanMail.for.Microsoft.Exchange.Trend_Micro_ScanMail_for_Microsoft_Exchange_Installation	EventCollection	True			0	17	Trend Micro ScanMail for Microsoft Exchange	True	Information	Low	True	Application
	Manual update was unsuccessful		Manual_update_was_unsuccessful_1_Rule	Trend.Micro.ScanMail.for.Microsoft.Exchange.Trend_Micro_ScanMail_for_Microsoft_Exchange_Installation	EventCollection	True			0	16	Trend Micro ScanMail for Microsoft Exchange	True	Error	Normal	True	Application
	Number of advanced threats		Number_of_advanced_threats_1_Rule	Trend.Micro.ScanMail.for.Microsoft.Exchange.Trend_Micro_ScanMail_for_Microsoft_Exchange_Installation	PerformanceCollection	True	SMEX Real Time Count	Number of advanced threats	60	0		False			True
	Number of blocked attachments		Number_of_blocked_attachments_1_Rule	Trend.Micro.ScanMail.for.Microsoft.Exchange.Trend_Micro_ScanMail_for_Microsoft_Exchange_Installation	PerformanceCollection	True	SMEX Real Time Count	Number of blocked attachments	60	0		False			True
	Number of blocked connections		Number_of_blocked_connection_1_Rule	Trend.Micro.ScanMail.for.Microsoft.Exchange.Trend_Micro_ScanMail_for_Microsoft_Exchange_Installation	PerformanceCollection	True	SMEX Real Time Count	Number of blocked connections	60	0		False			True
	Number of content violations		Number_of_content_violations_1_Rule	Trend.Micro.ScanMail.for.Microsoft.Exchange.Trend_Micro_ScanMail_for_Microsoft_Exchange_Installation	PerformanceCollection	True	SMEX Real Time Count	Number of content violations	60	0		False			True
	Number of DLP violations		Number_of_DLP_violations_1_Rule	Trend.Micro.ScanMail.for.Microsoft.Exchange.Trend_Micro_ScanMail_for_Microsoft_Exchange_Installation	PerformanceCollection	True	SMEX Real Time Count	Number of DLP violations	60	0		False			True
	Number of malicious URLs		Number_of_malicious_URLs_1_Rule	Trend.Micro.ScanMail.for.Microsoft.Exchange.Trend_Micro_ScanMail_for_Microsoft_Exchange_Installation	PerformanceCollection	True	SMEX Real Time Count	Number of malicious URLs	60	0		False			True
	Number of messages scanned		Number_of_messages_scanned_1_Rule	Trend.Micro.ScanMail.for.Microsoft.Exchange.Trend_Micro_ScanMail_for_Microsoft_Exchange_Installation	PerformanceCollection	True	SMEX Real Time Count	Number of messages scanned	60	0		False			True
	Number of phishing messages		Number_of_phishing_messages_1_Rule	Trend.Micro.ScanMail.for.Microsoft.Exchange.Trend_Micro_ScanMail_for_Microsoft_Exchange_Installation	PerformanceCollection	True	SMEX Real Time Count	Number of phishing messages	60	0		False			True
	Number of spam messages		Number_of_spam_1_Rule	Trend.Micro.ScanMail.for.Microsoft.Exchange.Trend_Micro_ScanMail_for_Microsoft_Exchange_Installation	PerformanceCollection	True	SMEX Real Time Count	Number of spam messages	60	0		False			True
	Number of spyware/grayware		Number_of_spywares_graywares_1_Rule	Trend.Micro.ScanMail.for.Microsoft.Exchange.Trend_Micro_ScanMail_for_Microsoft_Exchange_Installation	PerformanceCollection	True	SMEX Real Time Count	Number of spyware/grayware	60	0		False			True
	Number of total spyware/grayware		Number_of_total_additional_threat_virus_type_detected_1_Rule	Trend.Micro.ScanMail.for.Microsoft.Exchange.Trend_Micro_ScanMail_for_Microsoft_Exchange_Installation	PerformanceCollection	True	SMEX Report Collection	Number of total spyware/grayware	3600	0		False			True
	Number of total advanced threats		Number_of_total_advanced_threats_1_Rule	Trend.Micro.ScanMail.for.Microsoft.Exchange.Trend_Micro_ScanMail_for_Microsoft_Exchange_Installation	PerformanceCollection	True	SMEX Report Collection	Number of total advanced threats	3600	0		False			True
	Number of total attachments scanned		Number_of_total_attachments_scanned_1_Rule	Trend.Micro.ScanMail.for.Microsoft.Exchange.Trend_Micro_ScanMail_for_Microsoft_Exchange_Installation	PerformanceCollection	True	SMEX Report Collection	Number of total attachments scanned	3600	0		False			True
	Number of total blocked attachments		Number_of_total_blocked_attachments_1_Rule	Trend.Micro.ScanMail.for.Microsoft.Exchange.Trend_Micro_ScanMail_for_Microsoft_Exchange_Installation	PerformanceCollection	True	SMEX Report Collection	Number of total blocked attachments	3600	0		False			True
	Number of total blocked connections		Number_of_total_blocked_connection_1_Rule	Trend.Micro.ScanMail.for.Microsoft.Exchange.Trend_Micro_ScanMail_for_Microsoft_Exchange_Installation	PerformanceCollection	True	SMEX Report Collection	Number of total blocked connections	3600	0		False			True
	Number of total content violations		Number_of_total_content_violations_1_Rule	Trend.Micro.ScanMail.for.Microsoft.Exchange.Trend_Micro_ScanMail_for_Microsoft_Exchange_Installation	PerformanceCollection	True	SMEX Report Collection	Number of total content violations	3600	0		False			True
	Number of total DLP violations		Number_of_total_DLP_violations_1_Rule	Trend.Micro.ScanMail.for.Microsoft.Exchange.Trend_Micro_ScanMail_for_Microsoft_Exchange_Installation	PerformanceCollection	True	SMEX Report Collection	Number of total DLP violations	3600	0		False			True
	Number of total generic virus types		Number_of_total_generic_virus_type_detected_1_Rule	Trend.Micro.ScanMail.for.Microsoft.Exchange.Trend_Micro_ScanMail_for_Microsoft_Exchange_Installation	PerformanceCollection	True	SMEX Report Collection	Number of total generic virus types	3600	0		False			True
	Number of total malicious URLs		Number_of_total_malicious_URLs_1_Rule	Trend.Micro.ScanMail.for.Microsoft.Exchange.Trend_Micro_ScanMail_for_Microsoft_Exchange_Installation	PerformanceCollection	True	SMEX Report Collection	Number of total malicious URLs	3600	0		False			True
	Number of total messages scanned		Number_of_total_messages_scanned_1_Rule	Trend.Micro.ScanMail.for.Microsoft.Exchange.Trend_Micro_ScanMail_for_Microsoft_Exchange_Installation	PerformanceCollection	True	SMEX Report Collection	Number of total messages scanned	3600	0		False			True
	Number of total other malicious code		Number_of_total_other_malicious_code_virus_type_detected_1_Rule	Trend.Micro.ScanMail.for.Microsoft.Exchange.Trend_Micro_ScanMail_for_Microsoft_Exchange_Installation	PerformanceCollection	True	SMEX Report Collection	Number of total other malicious code	3600	0		False			True
	Number of total packed files		Number_of_total_packed_file_virus_type_detected_1_Rule	Trend.Micro.ScanMail.for.Microsoft.Exchange.Trend_Micro_ScanMail_for_Microsoft_Exchange_Installation	PerformanceCollection	True	SMEX Report Collection	Number of total packed files	3600	0		False			True
	Number of total phishing messages		Number_of_total_phish_1_Rule	Trend.Micro.ScanMail.for.Microsoft.Exchange.Trend_Micro_ScanMail_for_Microsoft_Exchange_Installation	PerformanceCollection	True	SMEX Report Collection	Number of total phishing messages	3600	0		False			True
	Number of total spam messages		Number_of_total_spam_1_Rule	Trend.Micro.ScanMail.for.Microsoft.Exchange.Trend_Micro_ScanMail_for_Microsoft_Exchange_Installation	PerformanceCollection	True	SMEX Report Collection	Number of total spam messages	3600	0		False			True
	Number of total uncleanable viruses/malware		Number_of_total_uncleanable_viruses_1_Rule	Trend.Micro.ScanMail.for.Microsoft.Exchange.Trend_Micro_ScanMail_for_Microsoft_Exchange_Installation	PerformanceCollection	True	SMEX Report Collection	Number of total uncleanable viruses/malware	3600	0		False			True
	Number of total unscannable message parts		Number_of_total_unscannable_message_parts_1_Rule	Trend.Micro.ScanMail.for.Microsoft.Exchange.Trend_Micro_ScanMail_for_Microsoft_Exchange_Installation	PerformanceCollection	True	SMEX Report Collection	Number of total unscannable message parts	3600	0		False			True
	Number of total security risks		Number_of_total_viruses_found_1_Rule	Trend.Micro.ScanMail.for.Microsoft.Exchange.Trend_Micro_ScanMail_for_Microsoft_Exchange_Installation	PerformanceCollection	True	SMEX Report Collection	Number of total security risks	3600	0		False			True
	Number of total viruses		Number_of_total_virus_virus_type_detected_1_Rule	Trend.Micro.ScanMail.for.Microsoft.Exchange.Trend_Micro_ScanMail_for_Microsoft_Exchange_Installation	PerformanceCollection	True	SMEX Report Collection	Number of total viruses	3600	0		False			True
	Number of total worms/trojans		Number_of_total_worm_trojan_virus_type_detected_1_Rule	Trend.Micro.ScanMail.for.Microsoft.Exchange.Trend_Micro_ScanMail_for_Microsoft_Exchange_Installation	PerformanceCollection	True	SMEX Report Collection	Number of total worms/trojans	3600	0		False			True
	Number of uncleanable viruses/malware		Number_of_uncleanable_viruses_1_Rule	Trend.Micro.ScanMail.for.Microsoft.Exchange.Trend_Micro_ScanMail_for_Microsoft_Exchange_Installation	PerformanceCollection	True	SMEX Real Time Count	Number of uncleanable viruses/malware	60	0		False			True
	Number of unscannable message parts		Number_of_unscannable_message_parts_1_Rule	Trend.Micro.ScanMail.for.Microsoft.Exchange.Trend_Micro_ScanMail_for_Microsoft_Exchange_Installation	PerformanceCollection	True	SMEX Real Time Count	Number of unscannable message parts	60	0		False			True
	Number of viruses/malware		Number_of_viruses_found_1_Rule	Trend.Micro.ScanMail.for.Microsoft.Exchange.Trend_Micro_ScanMail_for_Microsoft_Exchange_Installation	PerformanceCollection	True	SMEX Real Time Count	Number of viruses/malware	60	0		False			True
	Outbreak Prevention Mode started successfully		Outbreak_Prevention_Mode_started_successfully_1_Rule	Trend.Micro.ScanMail.for.Microsoft.Exchange.Trend_Micro_ScanMail_for_Microsoft_Exchange_Installation	EventCollection	True			0	80	Trend Micro ScanMail for Microsoft Exchange	True	Information	Low	True	Application
	Outbreak Prevention Mode stopped and restored configuration successfully		Outbreak_Prevention_Mode_stopped_and_restored_configuration_successfully_1_Rule	Trend.Micro.ScanMail.for.Microsoft.Exchange.Trend_Micro_ScanMail_for_Microsoft_Exchange_Installation	EventCollection	True			0	82	Trend Micro ScanMail for Microsoft Exchange	True	Information	Low	True	Application
	Process-Private Bytes		Process_Private_Bytes_1_Rule	Trend.Micro.ScanMail.for.Microsoft.Exchange.Trend_Micro_ScanMail_for_Microsoft_Exchange_Installation	PerformanceCollection	True	Process	Private Bytes	60	0		False			True
	Process-Processor Time		Process_Processor_Time_1_Rule	Trend.Micro.ScanMail.for.Microsoft.Exchange.Trend_Micro_ScanMail_for_Microsoft_Exchange_Installation	PerformanceCollection	True	Process	\% Processor Time	60	0		False			True
	Process-Working Set		Process_Working_Set_1_Rule	Trend.Micro.ScanMail.for.Microsoft.Exchange.Trend_Micro_ScanMail_for_Microsoft_Exchange_Installation	PerformanceCollection	True	Process	Working Set	60	0		False			True
	ScanMail service did not start successfully		ScanMail_service_did_not_start_successfully_1_Rule	Trend.Micro.ScanMail.for.Microsoft.Exchange.Trend_Micro_ScanMail_for_Microsoft_Exchange_Installation	EventCollection	True			0	3	Trend Micro ScanMail for Microsoft Exchange	True	Error	High	True	Application
	ScanMail service is unavailable		ScanMail_service_is_unavailable_1_Rule	Trend.Micro.ScanMail.for.Microsoft.Exchange.Trend_Micro_ScanMail_for_Microsoft_Exchange_Installation	EventCollection	True			0	4	Trend Micro ScanMail for Microsoft Exchange	True	Error	High	True	Application
	ScanMail Smart scan service is recovered	ScanMail Smart scan service is recovered, security risk scan will switch to smart scan method	ScanMail_Smart_scan_service_is_recovered_1_Rule	Trend.Micro.ScanMail.for.Microsoft.Exchange.Trend_Micro_ScanMail_for_Microsoft_Exchange_Installation	EventCollection	True			0	28675	Trend Micro ScanMail for Microsoft Exchange	True	Information	Normal	True	Application
	ScanMail Smart scan service is unavailable	ScanMail Smart scan service is unavailable, security risk scan will switch to conventional scan method	ScanMail_Smart_scan_service_is_unavailable_1_Rule	Trend.Micro.ScanMail.for.Microsoft.Exchange.Trend_Micro_ScanMail_for_Microsoft_Exchange_Installation	EventCollection	True			0	28673	Trend Micro ScanMail for Microsoft Exchange	True	Warning	Normal	True	Application
	ScanMail Web reputation service is recovered		ScanMail_Web_reputation_service_is_recovered_1_Rule	Trend.Micro.ScanMail.for.Microsoft.Exchange.Trend_Micro_ScanMail_for_Microsoft_Exchange_Installation	EventCollection	True			0	28677	Trend Micro ScanMail for Microsoft Exchange	True	Information	Normal	True	Application
	ScanMail Web reputation service is unavailable		ScanMail_Web_reputation_service_is_unavailable_1_Rule	Trend.Micro.ScanMail.for.Microsoft.Exchange.Trend_Micro_ScanMail_for_Microsoft_Exchange_Installation	EventCollection	True			0	28676	Trend Micro ScanMail for Microsoft Exchange	True	Warning	High	True	Application
	Scan engine switch		Scan_engine_switch_1_Rule	Trend.Micro.ScanMail.for.Microsoft.Exchange.Trend_Micro_ScanMail_for_Microsoft_Exchange_Installation	EventCollection	True			0	28680	Trend Micro ScanMail for Microsoft Exchange	True	Information	Normal	True	Application
	Scheduled scan tasks were successful		Scheduled_scan_tasks_were_successful_1_Rule	Trend.Micro.ScanMail.for.Microsoft.Exchange.Trend_Micro_ScanMail_for_Microsoft_Exchange_Installation	EventCollection	True			0	24	Trend Micro ScanMail for Microsoft Exchange	True	Information	Low	True	Application
	Scheduled scan tasks were unsuccessful		Scheduled_scan_tasks_were_unsuccessful_1_Rule	Trend.Micro.ScanMail.for.Microsoft.Exchange.Trend_Micro_ScanMail_for_Microsoft_Exchange_Installation	EventCollection	True			0	25	Trend Micro ScanMail for Microsoft Exchange	True	Error	Normal	True	Application
	Scheduled update was successful		Scheduled_update_was_successful_1_Rule	Trend.Micro.ScanMail.for.Microsoft.Exchange.Trend_Micro_ScanMail_for_Microsoft_Exchange_Installation	EventCollection	True			0	33	Trend Micro ScanMail for Microsoft Exchange	True	Information	Low	True	Application
	Scheduled update was unsuccessful		Scheduled_update_was_unsuccessful_1_Rule	Trend.Micro.ScanMail.for.Microsoft.Exchange.Trend_Micro_ScanMail_for_Microsoft_Exchange_Installation	EventCollection	True			0	32	Trend Micro ScanMail for Microsoft Exchange	True	Error	Normal	True	Application
	Search & Destroy - Each time a search was successful		SearchDestroy_Each_time_a_search_was_successful_1_Rule	Trend.Micro.ScanMail.for.Microsoft.Exchange.Trend_Micro_ScanMail_for_Microsoft_Exchange_Installation	EventCollection	True			0	28678	Trend Micro ScanMail for Microsoft Exchange	True	Information	Low	True	Application
	Search & Destroy - Each time a search was unsuccessful		SearchDestroy_Each_time_a_search_was_unsuccessful_1_Rule	Trend.Micro.ScanMail.for.Microsoft.Exchange.Trend_Micro_ScanMail_for_Microsoft_Exchange_Installation	EventCollection	True			0	28679	Trend Micro ScanMail for Microsoft Exchange	True	Error	Normal	True	Application
	Spyware Grayware Outbreak Alert		Spyware_Grayware_Outbreak_Alert_1_Rule	Trend.Micro.ScanMail.for.Microsoft.Exchange.Trend_Micro_ScanMail_for_Microsoft_Exchange_Installation	EventCollection	True			0	260	Trend Micro ScanMail for Microsoft Exchange	True	Warning	High	True	Application
	The disk space on the local drive(volume) of the backup, quarantine and archive directory is low		The_disk_space_on_the_local_drive_volume_of_the_backup_quarantine_and_archive_directory_is_low_1_Rule	Trend.Micro.ScanMail.for.Microsoft.Exchange.Trend_Micro_ScanMail_for_Microsoft_Exchange_Installation	EventCollection	True			0	22	Trend Micro ScanMail for Microsoft Exchange	True	Warning	Normal	True	Application
	The size of the database for quarantine, logs, and mailbox search results exceeds		The_size_of_database_to_keep_quarantine_and_logs_exceeds_1_Rule	Trend.Micro.ScanMail.for.Microsoft.Exchange.Trend_Micro_ScanMail_for_Microsoft_Exchange_Installation	EventCollection	True			0	23	Trend Micro ScanMail for Microsoft Exchange	True	Warning	Normal	True	Application
	Uncleanable Viruses/Malware Outbreak Alert		Uncleanable_Virus_Outbreak_Alert_1_Rule	Trend.Micro.ScanMail.for.Microsoft.Exchange.Trend_Micro_ScanMail_for_Microsoft_Exchange_Installation	EventCollection	True			0	258	Trend Micro ScanMail for Microsoft Exchange	True	Warning	High	True	Application
	Viruses/Malware Outbreak Alert		Virus_Outbreak_Alert_1_Rule	Trend.Micro.ScanMail.for.Microsoft.Exchange.Trend_Micro_ScanMail_for_Microsoft_Exchange_Installation	EventCollection	True			0	257	Trend Micro ScanMail for Microsoft Exchange	True	Warning	High	True	Application