| DisplayName | Description | ID | Target | Parent Monitor | Category | Enabled | Instance Name | Counter Name | Frequency | Alert Generate | Alert Severity | Alert Priority | Alert Auto Resolve | Monitor Type | Remotable | Accessibility | RunAs |
| ATA Center Service Monitor | This Monitor watches the ATACenter service on the Microsoft ATA 1.8 Center | Microsoft.AdvancedThreatAnalytics.1_8.Center.ATACenter | Microsoft.AdvancedThreatAnalytics.1_8.Center | System.Health.AvailabilityState | AvailabilityHealth | True | | | 0 | True | Error | Normal | True | Microsoft.Windows.CheckNTServiceStateMonitorType | True | Public | |
| Database AtSVC Block Size | Performance Monitor for the Microsoft ATA 1.8 Center Database AtSVC Block Size | Microsoft.AdvancedThreatAnalytics.1_8.Center.DatabaseAtSvcBlockSize.PerformanceHealth | Microsoft.AdvancedThreatAnalytics.1_8.Center | System.Health.PerformanceState | PerformanceHealth | True | Microsoft ATA Center | Database AtSVC Block Size | 60 | True | Warning | Normal | True | System.Performance.ConsecutiveSamplesThreshold | True | Public | |
| Database DirectoryServicesActivity Block Size< | Performance Monitor for the Microsoft ATA 1.8 Center Database DirectoryServicesActivity Block Size< | Microsoft.AdvancedThreatAnalytics.1_8.Center.DatabaseDirectoryServicesActivityBlockSize.PerformanceHealth | Microsoft.AdvancedThreatAnalytics.1_8.Center | System.Health.PerformanceState | PerformanceHealth | True | Microsoft ATA Center | Database DirectoryServicesActivity Block Size< | 60 | True | Warning | Normal | True | System.Performance.ConsecutiveSamplesThreshold | True | Public | |
| Database DNS Block Size | Performance Monitor for the Microsoft ATA 1.8 Center Database DNS Block Size | Microsoft.AdvancedThreatAnalytics.1_8.Center.DatabaseDnsBlockSize.PerformanceHealth | Microsoft.AdvancedThreatAnalytics.1_8.Center | System.Health.PerformanceState | PerformanceHealth | True | Microsoft ATA Center | Database DNS Block Size | 60 | True | Warning | Normal | True | System.Performance.ConsecutiveSamplesThreshold | True | Public | |
| Database DRSR Block Size | Performance Monitor for the Microsoft ATA 1.8 Center Database DRSR Block Size | Microsoft.AdvancedThreatAnalytics.1_8.Center.DatabaseDrsrBlockSize.PerformanceHealth | Microsoft.AdvancedThreatAnalytics.1_8.Center | System.Health.PerformanceState | PerformanceHealth | True | Microsoft ATA Center | Database DRSR Block Size | 60 | True | Warning | Normal | True | System.Performance.ConsecutiveSamplesThreshold | True | Public | |
| Database GroupMembershipChangeEvent Block Size | Performance Monitor for the Microsoft ATA 1.8 Center Database GroupMembershipChangeEvent Block Size | Microsoft.AdvancedThreatAnalytics.1_8.Center.DatabaseGroupMembershipChangeEventBlockSize.PerformanceHealth | Microsoft.AdvancedThreatAnalytics.1_8.Center | System.Health.PerformanceState | PerformanceHealth | True | Microsoft ATA Center | Database GroupMembershipChangeEvent Block Size | 60 | True | Warning | Normal | True | System.Performance.ConsecutiveSamplesThreshold | True | Public | |
| Database KerberosAP Block Size | Performance Monitor for the Microsoft ATA 1.8 Center Database KerberosAP Block Size | Microsoft.AdvancedThreatAnalytics.1_8.Center.DatabaseKerberosApBlockSize.PerformanceHealth | Microsoft.AdvancedThreatAnalytics.1_8.Center | System.Health.PerformanceState | PerformanceHealth | True | Microsoft ATA Center | Database KerberosAP Block Size | 60 | True | Warning | Normal | True | System.Performance.ConsecutiveSamplesThreshold | True | Public | |
| Database KerberosAS Block Size | Performance Monitor for the Microsoft ATA 1.8 Center Database KerberosAS Block Size | Microsoft.AdvancedThreatAnalytics.1_8.Center.DatabaseKerberosAsBlockSize.PerformanceHealth | Microsoft.AdvancedThreatAnalytics.1_8.Center | System.Health.PerformanceState | PerformanceHealth | True | Microsoft ATA Center | Database KerberosAS Block Size | 60 | True | Warning | Normal | True | System.Performance.ConsecutiveSamplesThreshold | True | Public | |
| Database KerberosTGS Block Size | Performance Monitor for the Microsoft ATA 1.8 Center Database KerberosTGS Block Size | Microsoft.AdvancedThreatAnalytics.1_8.Center.DatabaseKerberosTgsBlockSize.PerformanceHealth | Microsoft.AdvancedThreatAnalytics.1_8.Center | System.Health.PerformanceState | PerformanceHealth | True | Microsoft ATA Center | Database KerberosTGS Block Size | 60 | True | Warning | Normal | True | System.Performance.ConsecutiveSamplesThreshold | True | Public | |
| Database LDAP Block Size | Performance Monitor for the Microsoft ATA 1.8 Center Database LDAP Block Size | Microsoft.AdvancedThreatAnalytics.1_8.Center.DatabaseLdapBlockSize.PerformanceHealth | Microsoft.AdvancedThreatAnalytics.1_8.Center | System.Health.PerformanceState | PerformanceHealth | True | Microsoft ATA Center | Database LDAP Block Size | 60 | True | Warning | Normal | True | System.Performance.ConsecutiveSamplesThreshold | True | Public | |
| Database LogonEvent Block Size | Performance Monitor for the Microsoft ATA 1.8 Center Database LogonEvent Block Size | Microsoft.AdvancedThreatAnalytics.1_8.Center.DatabaseLogonEventBlockSize.PerformanceHealth | Microsoft.AdvancedThreatAnalytics.1_8.Center | System.Health.PerformanceState | PerformanceHealth | True | Microsoft ATA Center | Database LogonEvent Block Size | 60 | True | Warning | Normal | True | System.Performance.ConsecutiveSamplesThreshold | True | Public | |
| Database LsaRPC Block Size | Performance Monitor for the Microsoft ATA 1.8 Center Database LsaRPC Block Size | Microsoft.AdvancedThreatAnalytics.1_8.Center.DatabaseLsaRpcBlockSize.PerformanceHealth | Microsoft.AdvancedThreatAnalytics.1_8.Center | System.Health.PerformanceState | PerformanceHealth | True | Microsoft ATA Center | Database LsaRPC Block Size | 60 | True | Warning | Normal | True | System.Performance.ConsecutiveSamplesThreshold | True | Public | |
| Database Netlogon Block Size | Performance Monitor for the Microsoft ATA 1.8 Center Database Netlogon Block Size | Microsoft.AdvancedThreatAnalytics.1_8.Center.DatabaseNetlogonBlockSize.PerformanceHealth | Microsoft.AdvancedThreatAnalytics.1_8.Center | System.Health.PerformanceState | PerformanceHealth | True | Microsoft ATA Center | Database Netlogon Block Size | 60 | True | Warning | Normal | True | System.Performance.ConsecutiveSamplesThreshold | True | Public | |
| Database NTLM Block Size | Performance Monitor for the Microsoft ATA 1.8 Center Database NTLM Block Size | Microsoft.AdvancedThreatAnalytics.1_8.Center.DatabaseNtlmBlockSize.PerformanceHealth | Microsoft.AdvancedThreatAnalytics.1_8.Center | System.Health.PerformanceState | PerformanceHealth | True | Microsoft ATA Center | Database NTLM Block Size | 60 | True | Warning | Normal | True | System.Performance.ConsecutiveSamplesThreshold | True | Public | |
| Database NTLMEvent Block Size | Performance Monitor for the Microsoft ATA 1.8 Center Database NTLMEvent Block Size | Microsoft.AdvancedThreatAnalytics.1_8.Center.DatabaseNtlmEventBlockSize.PerformanceHealth | Microsoft.AdvancedThreatAnalytics.1_8.Center | System.Health.PerformanceState | PerformanceHealth | True | Microsoft ATA Center | Database NTLMEvent Block Size | 60 | True | Warning | Normal | True | System.Performance.ConsecutiveSamplesThreshold | True | Public | |
| Database SAMR Block Size | Performance Monitor for the Microsoft ATA 1.8 Center Database SAMR Block Size | Microsoft.AdvancedThreatAnalytics.1_8.Center.DatabaseSamrBlockSize.PerformanceHealth | Microsoft.AdvancedThreatAnalytics.1_8.Center | System.Health.PerformanceState | PerformanceHealth | True | Microsoft ATA Center | Database SAMR Block Size | 60 | True | Warning | Normal | True | System.Performance.ConsecutiveSamplesThreshold | True | Public | |
| Database ServiceControl Block Size | Performance Monitor for the Microsoft ATA 1.8 Center Database ServiceControl Block Size | Microsoft.AdvancedThreatAnalytics.1_8.Center.DatabaseServiceControlBlockSize.PerformanceHealth | Microsoft.AdvancedThreatAnalytics.1_8.Center | System.Health.PerformanceState | PerformanceHealth | True | Microsoft ATA Center | Database ServiceControl Block Size | 60 | True | Warning | Normal | True | System.Performance.ConsecutiveSamplesThreshold | True | Public | |
| Database SMB Block Size | Performance Monitor for the Microsoft ATA 1.8 Center Database SMB Block Size | Microsoft.AdvancedThreatAnalytics.1_8.Center.DatabaseSmbBlockSize.PerformanceHealth | Microsoft.AdvancedThreatAnalytics.1_8.Center | System.Health.PerformanceState | PerformanceHealth | True | Microsoft ATA Center | Database SMB Block Size | 60 | True | Warning | Normal | True | System.Performance.ConsecutiveSamplesThreshold | True | Public | |
| Database SrvSVC Block Size | Performance Monitor for the Microsoft ATA 1.8 Center Database SrvSVC Block Size | Microsoft.AdvancedThreatAnalytics.1_8.Center.DatabaseSrvSvcBlockSize.PerformanceHealth | Microsoft.AdvancedThreatAnalytics.1_8.Center | System.Health.PerformanceState | PerformanceHealth | True | Microsoft ATA Center | Database SrvSVC Block Size | 60 | True | Warning | Normal | True | System.Performance.ConsecutiveSamplesThreshold | True | Public | |
| Database TaskScheduler Block Size | Performance Monitor for the Microsoft ATA 1.8 Center Database TaskScheduler Block Size | Microsoft.AdvancedThreatAnalytics.1_8.Center.DatabaseTaskSchedulerBlockSize.PerformanceHealth | Microsoft.AdvancedThreatAnalytics.1_8.Center | System.Health.PerformanceState | PerformanceHealth | True | Microsoft ATA Center | Database TaskScheduler Block Size | 60 | True | Warning | Normal | True | System.Performance.ConsecutiveSamplesThreshold | True | Public | |
| Database VpnAuthenticationEvent Block Size | Performance Monitor for the Microsoft ATA 1.8 Center Database VpnAuthenticationEvent Block Size | Microsoft.AdvancedThreatAnalytics.1_8.Center.DatabaseVpnAuthenticationEventBlockSize.PerformanceHealth | Microsoft.AdvancedThreatAnalytics.1_8.Center | System.Health.PerformanceState | PerformanceHealth | True | Microsoft ATA Center | Database VpnAuthenticationEvent Block Size | 60 | True | Warning | Normal | True | System.Performance.ConsecutiveSamplesThreshold | True | Public | |
| Database Wmi Block Size | Performance Monitor for the Microsoft ATA 1.8 Center Database Wmi Block Size | Microsoft.AdvancedThreatAnalytics.1_8.Center.DatabaseWmiBlockSize.PerformanceHealth | Microsoft.AdvancedThreatAnalytics.1_8.Center | System.Health.PerformanceState | PerformanceHealth | True | Microsoft ATA Center | Database Wmi Block Size | 60 | True | Warning | Normal | True | System.Performance.ConsecutiveSamplesThreshold | True | Public | |
| EntityProfiler Network Activity Block Size | Performance Monitor for the Microsoft ATA 1.8 Center EntityProfiler Network Activity Block Size | Microsoft.AdvancedThreatAnalytics.1_8.Center.EntityProfilerNetworkActivityBlockSize.PerformanceHealth | Microsoft.AdvancedThreatAnalytics.1_8.Center | System.Health.PerformanceState | PerformanceHealth | True | Microsoft ATA Center | EntityProfiler Network Activity Block Size | 60 | True | Warning | Normal | True | System.Performance.ConsecutiveSamplesThreshold | True | Public | |
| EntityReceiver Entity Batch Block Size | Performance Monitor for the Microsoft ATA 1.8 Center EntityReceiver Entity Batch Block Size | Microsoft.AdvancedThreatAnalytics.1_8.Center.EntityReceiverEntityBatchBlockSize.PerformanceHealth | Microsoft.AdvancedThreatAnalytics.1_8.Center | System.Health.PerformanceState | PerformanceHealth | True | Microsoft ATA Center | EntityReceiver Entity Batch Block Size | 60 | True | Warning | Normal | True | System.Performance.ConsecutiveSamplesThreshold | True | Public | |
| NetworkActivityProcessor Network Activity Block Size | Performance Monitor for the Microsoft ATA 1.8 Center NetworkActivityProcessor Network Activity Block Size | Microsoft.AdvancedThreatAnalytics.1_8.Center.NetworkActivityProcessorNetworkActivityBlockSize.PerformanceHealth | Microsoft.AdvancedThreatAnalytics.1_8.Center | System.Health.PerformanceState | PerformanceHealth | True | Microsoft ATA Center | NetworkActivityProcessor Network Activity Block Size | 60 | True | Warning | Normal | True | System.Performance.ConsecutiveSamplesThreshold | True | Public | |
| MongoDB Service Monitor | This Monitor watches the MongoDB service on the Microsoft ATA 1.8 Database | Microsoft.AdvancedThreatAnalytics.1_8.Database.MongoDB | Microsoft.AdvancedThreatAnalytics.1_8.Database | System.Health.AvailabilityState | AvailabilityHealth | True | | | 0 | True | Error | Normal | True | Microsoft.Windows.CheckNTServiceStateMonitorType | True | Public | |
| ATA Gateway Service Monitor | This Monitor watches the ATAGateway service on the Microsoft ATA 1.8 Gateway | Microsoft.AdvancedThreatAnalytics.1_8.Gateway.ATAGateway | Microsoft.AdvancedThreatAnalytics.1_8.Gateway | System.Health.AvailabilityState | AvailabilityHealth | True | | | 0 | True | Error | Normal | True | Microsoft.Windows.CheckNTServiceStateMonitorType | True | Public | |
| ATA Gateway Updater Service Monitor | This Monitor watches the ATAGatewayUpdater service on the Microsoft ATA 1.8 Gateway | Microsoft.AdvancedThreatAnalytics.1_8.Gateway.ATAGatewayUpdater | Microsoft.AdvancedThreatAnalytics.1_8.Gateway | System.Health.AvailabilityState | AvailabilityHealth | True | | | 0 | True | Error | Normal | True | Microsoft.Windows.CheckNTServiceStateMonitorType | True | Public | |
| EntityResolver Activity Block Size | Performance Monitor for the Microsoft ATA 1.8 Gateway EntityResolver Activity Block Size | Microsoft.AdvancedThreatAnalytics.1_8.Gateway.EntityResolverActivityBlockSize.PerformanceHealth | Microsoft.AdvancedThreatAnalytics.1_8.Gateway | System.Health.PerformanceState | PerformanceHealth | True | Microsoft ATA Gateway | EntityResolver Activity Block Size | 60 | True | Warning | Normal | True | System.Performance.ConsecutiveSamplesThreshold | True | Public | |
| EntitySender Entity Batch Block Size | Performance Monitor for the Microsoft ATA 1.8 Gateway EntitySender Entity Batch Block Size | Microsoft.AdvancedThreatAnalytics.1_8.Gateway.EntitySenderEntityBatchBlockSize.PerformanceHealth | Microsoft.AdvancedThreatAnalytics.1_8.Gateway | System.Health.PerformanceState | PerformanceHealth | True | Microsoft ATA Gateway | EntitySender Entity Batch Block Size | 60 | True | Warning | Normal | True | System.Performance.ConsecutiveSamplesThreshold | True | Public | |
| EntitySender Entity Batch Send Time | Performance Monitor for the Microsoft ATA 1.8 Gateway EntitySender Entity Batch Send Time | Microsoft.AdvancedThreatAnalytics.1_8.Gateway.EntitySenderEntityBatchSendTime.PerformanceHealth | Microsoft.AdvancedThreatAnalytics.1_8.Gateway | System.Health.PerformanceState | PerformanceHealth | True | Microsoft ATA Gateway | EntitySender Entity Batch Send Time | 60 | True | Warning | Normal | True | System.Performance.ConsecutiveSamplesThreshold | True | Public | |
| NetworkActivityTranslator Message Data 0 Block Size | Performance Monitor for the Microsoft ATA 1.8 Gateway NetworkActivityTranslator Message Data 0 Block Size | Microsoft.AdvancedThreatAnalytics.1_8.Gateway.NetworkActivityTranslatorMessageData0BlockSize.PerformanceHealth | Microsoft.AdvancedThreatAnalytics.1_8.Gateway | System.Health.PerformanceState | PerformanceHealth | True | Microsoft ATA Gateway | NetworkActivityTranslator Message Data 0 Block Size | 60 | True | Warning | Normal | True | System.Performance.ConsecutiveSamplesThreshold | True | Public | |
| NetworkListener ETW Dropped Events/Sec | Performance Monitor for the Microsoft ATA 1.8 Gateway NetworkListener ETW Dropped Events/Sec | Microsoft.AdvancedThreatAnalytics.1_8.Gateway.NetworkListenerETWDroppedEventsSec.PerformanceHealth | Microsoft.AdvancedThreatAnalytics.1_8.Gateway | System.Health.PerformanceState | PerformanceHealth | True | Microsoft ATA Gateway | NetworkListener ETW Dropped Events/Sec | 60 | True | Warning | Normal | True | System.Performance.ConsecutiveSamplesThreshold | True | Public | |
| NetworkListener PEF Dropped Events/Sec | Performance Monitor for the Microsoft ATA 1.8 Gateway NetworkListener PEF Dropped Events/Sec | Microsoft.AdvancedThreatAnalytics.1_8.Gateway.NetworkListenerPEFDroppedEventsSec.PerformanceHealth | Microsoft.AdvancedThreatAnalytics.1_8.Gateway | System.Health.PerformanceState | PerformanceHealth | True | Microsoft ATA Gateway | NetworkListener PEF Dropped Events/Sec | 60 | True | Warning | Normal | True | System.Performance.ConsecutiveSamplesThreshold | True | Public | |