| DisplayName | Description | ID | Target | Parent Monitor | Category | Enabled | Instance Name | Counter Name | Frequency | Alert Generate | Alert Severity | Alert Priority | Alert Auto Resolve | Monitor Type | Remotable | Accessibility | RunAs |
| Security Monitoring: Repeated RDP Logon Failures | | SecurityMonitoringMP.Event.RepeatedLogonMonitor | Microsoft.Windows.Server.OperatingSystem | System.Health.SecurityState | Custom | True | | | 0 | True | Error | Normal | False | Microsoft.Windows.RepeatedEventLogTimer2StateMonitorType | True | Public | |
| A System - Is Pending Restart | A system has been identified as requiring a system restart. Not all features / functions will be available until after the restart has completed. | SecurityMonitoringMP.Event.SystemPendingRestart | Microsoft.Windows.Server.OperatingSystem | System.Health.AvailabilityState | Custom | False | | | 0 | True | Error | Normal | True | Microsoft.Windows.2SingleEventLog2StateMonitorType | True | Public | |
| Security Monitoring: Event Log Collector Service is stopped | | SecurityMonitoringMP.Health.EventCollectorMonitor | WindowsEventCollectorDiscovery.EventLogCollectorServer | System.Health.AvailabilityState | Custom | True | | | 0 | True | Error | Normal | True | Microsoft.Windows.CheckNTServiceStateMonitorType | True | Public | |
| Security Monitoring: UseLogonCredential key does not exist | | SecurityMonitoringMP.UseLogonCredentialExistsMonitor | Microsoft.Windows.Server.OperatingSystem | System.Health.SecurityState | Custom | True | | | 0 | True | Error | Normal | True | SecurityMonitoringMP.RegValueExistsMonitorType | True | Internal | |
| Security Monitoring: Wdigest passwords stored in clear text | | SecurityMonitoringMP.WDigestRegConfiguredMonitor | Microsoft.Windows.Server.OperatingSystem | System.Health.SecurityState | Custom | True | | | 0 | True | Error | Normal | True | SecurityMonitoringMP.RegValueMonitorType | True | Internal | |