To enable Configuration Manager EndPoint Protection collection alerts

  1. Set up a connection to the Root\SMS namespace
  2. Create an instance of the SMS_EPAlert WMI class
  3. Set the AlertState, InstanceNameParam1, Name, ParameterValues, TypeInstanceID,
    Severity, TypeID WMI Properties
  4. Depending on the configuration, set the correct value