Control: Adaptive application controls for defining safe applications should be enabled on your machines
Description
Enable application controls to define the list of known-safe applications running on your machines, and alert you when other applications run. This helps harden your machines against malware. To simplify the process of configuring and maintaining your rules, Security Center uses machine learning to analyze the applications running on each machine and suggest the list of known-safe applications.
Usage
Run the control in your terminal:
powerpipe control run azure_compliance.control.compute_vm_adaptive_application_controls_enabledSnapshot and share results via Turbot Pipes:
powerpipe loginpowerpipe control run azure_compliance.control.compute_vm_adaptive_application_controls_enabled --shareSQL
This control uses a named query:
select id as resource, 'info' as status, 'Manual verification required. Check control description for more details.' as reason, display_name as subscriptionfrom azure_subscription;