Detection rules › By event

McAfee-ePolicy-Orchestrator

Event	Rules
Event ID 1003	1
Event ID 1026	1
Event ID 1028	1
Event ID 1029	1
Event ID 1040	1
Event ID 1055	1
Event ID 1062	1
Event ID 1067	1
Event ID 1076	1
Event ID 1119	1
Event ID 1123	1
Event ID 1127	1
Event ID 1298	1
Event ID 1310	1
Event ID 2002	1
Event ID 2004	1
Event ID 2005	1
Event ID 2009	1
Event ID 2015	1
Event ID 2402	1
Event ID 2412	1
Event ID 2413	1
Event ID 3032	1
Event ID 3033	1
Event ID 3034	1
Event ID 3036	1
Event ID 3038	1
Event ID 4650	1
Event ID 16025	1
Event ID 35009	1

Event ID 1003

1 detection rules reference this event. View event page.

Kusto (1)

McAfee ePO - Task error severity medium T1070, T1685

Event ID 1026

1 detection rules reference this event. View event page.

Kusto (1)

McAfee ePO - Unable to clean or delete infected file severity high T1070, T1685

Event ID 1028

1 detection rules reference this event. View event page.

Kusto (1)

McAfee ePO - Unable to clean or delete infected file severity high T1070, T1685

Event ID 1029

1 detection rules reference this event. View event page.

Kusto (1)

McAfee ePO - File added to exceptions severity medium T1070, T1685

Event ID 1040

1 detection rules reference this event. View event page.

Kusto (1)

McAfee ePO - Logging error occurred severity medium T1070, T1685

Event ID 1055

1 detection rules reference this event. View event page.

Kusto (1)

McAfee ePO - Unable to clean or delete infected file severity high T1070, T1685

Event ID 1062

1 detection rules reference this event. View event page.

Kusto (1)

McAfee ePO - Error sending alert severity medium T1070, T1685

Event ID 1067

1 detection rules reference this event. View event page.

Kusto (1)

McAfee ePO - Task error severity medium T1070, T1685

Event ID 1076

1 detection rules reference this event. View event page.

Kusto (1)

McAfee ePO - Logging error occurred severity medium T1070, T1685

Event ID 1119

1 detection rules reference this event. View event page.

Kusto (1)

McAfee ePO - Update failed severity medium T1070, T1685

Event ID 1123

1 detection rules reference this event. View event page.

Kusto (1)

McAfee ePO - Update failed severity medium T1070, T1685

Event ID 1127

1 detection rules reference this event. View event page.

Kusto (1)

McAfee ePO - Scanning engine disabled severity low T1070, T1685

Event ID 1298

1 detection rules reference this event. View event page.

Kusto (1)

McAfee ePO - Unable to clean or delete infected file severity high T1070, T1685

Event ID 1310

1 detection rules reference this event. View event page.

Kusto (1)

McAfee ePO - Unable to clean or delete infected file severity high T1070, T1685

Event ID 2002

1 detection rules reference this event. View event page.

Kusto (1)

McAfee ePO - Unable to clean or delete infected file severity high T1070, T1685

Event ID 2004

1 detection rules reference this event. View event page.

Kusto (1)

McAfee ePO - Unable to clean or delete infected file severity high T1070, T1685

Event ID 2005

1 detection rules reference this event. View event page.

Kusto (1)

McAfee ePO - File added to exceptions severity medium T1070, T1685

Event ID 2009

1 detection rules reference this event. View event page.

Kusto (1)

McAfee ePO - Unable to clean or delete infected file severity high T1070, T1685

Event ID 2015

1 detection rules reference this event. View event page.

Kusto (1)

McAfee ePO - File added to exceptions severity medium T1070, T1685

Event ID 2402

1 detection rules reference this event. View event page.

Kusto (1)

McAfee ePO - Update failed severity medium T1070, T1685

Event ID 2412

1 detection rules reference this event. View event page.

Kusto (1)

McAfee ePO - Deployment failed severity high T1685

Event ID 2413

1 detection rules reference this event. View event page.

Kusto (1)

McAfee ePO - Attempt uninstall McAfee agent severity medium T1070, T1685

Event ID 3032

1 detection rules reference this event. View event page.

Kusto (1)

McAfee ePO - Logging error occurred severity medium T1070, T1685

Event ID 3033

1 detection rules reference this event. View event page.

Kusto (1)

McAfee ePO - Logging error occurred severity medium T1070, T1685

Event ID 3034

1 detection rules reference this event. View event page.

Kusto (1)

McAfee ePO - Logging error occurred severity medium T1070, T1685

Event ID 3036

1 detection rules reference this event. View event page.

Kusto (1)

McAfee ePO - Logging error occurred severity medium T1070, T1685

Event ID 3038

1 detection rules reference this event. View event page.

Kusto (1)

McAfee ePO - Logging error occurred severity medium T1070, T1685

Event ID 4650

1 detection rules reference this event. View event page.

Kusto (1)

McAfee ePO - Spam Email detected severity medium T1566

Event ID 16025

1 detection rules reference this event. View event page.

Kusto (1)

McAfee ePO - Agent Handler down severity medium T1685

Event ID 35009

1 detection rules reference this event. View event page.

Kusto (1)

McAfee ePO - Firewall disabled severity medium T1071, T1685