Menu Close

Category: Uncategorized

Part 4: Use VSAE fragments to create an alert generating event log rule

This is Part 4 in a series of posts described here:  https://kevinholman.com/2016/06/04/authoring-management-packs-the-fast-and-easy-way-using-visual-studio/ In our next example fragment – we will monitor the event log for a specific event, and generate an alert if it occurs.   Step 1:  Download and extract the sample MP fragments.  These are available here:  https://github.com/thekevinholman/FragmentLibrary…

Part 3: Use VSAE fragments to monitor a service

This is Part 3 in a series of posts described here:  https://kevinholman.com/2016/06/04/authoring-management-packs-the-fast-and-easy-way-using-visual-studio/   In our next example fragment – we will monitor a service by creating a monitor that targets our custom class.   Step 1:  Download and extract the sample MP fragments.  These are available here:  https://github.com/thekevinholman/FragmentLibrary I will…

Part 2: Use VSAE fragments to dynamically discover an application based on the existence of a registry key or value

This is Part 2 in a series of posts described here:  https://kevinholman.com/2016/06/04/authoring-management-packs-the-fast-and-easy-way-using-visual-studio/   Now we will start with our first example fragment – discovering an app and creating a class for it.   Step 1:  Download and extract the sample MP fragments.  These are available here:  https://github.com/thekevinholman/FragmentLibrary I will update…

Part 1: Use VSAE to create a new Management Pack Project

This is Part 1 in a multi-part series explained here:  https://kevinholman.com/2016/06/04/authoring-management-packs-the-fast-and-easy-way-using-visual-studio/   Step 1:  Install a supported version of Visual Studio. Step 2:  Install the VSAE components from https://www.microsoft.com/en-us/download/details.aspx?id=30169 Step 3:  Open Visual Studio.  File > New > Project     Step 4:  Pick the version you want to write for,…

Monitoring a file hash using SCOM

I had an interesting customer request recently – to monitor for a specific system file, and make SURE it is not a modified/threat file.   You can use this as a simple example of a two-state timed script monitor (using vbscript) which demonstrates script arguments, logging, alerting, propertybag outputs, etc.…