turbot/steampipe-mod-azure-compliance

Control: Monitor missing Endpoint Protection in Azure Security Center

Description

Servers without an installed Endpoint Protection agent will be monitored by Azure Security Center as recommendations.

Usage

Run the control in your terminal:

powerpipe control run azure_compliance.control.compute_vm_endpoint_protection_agent_installed

Snapshot and share results via Turbot Pipes:

powerpipe login
powerpipe control run azure_compliance.control.compute_vm_endpoint_protection_agent_installed --share

SQL

This control uses a named query:

select
id as resource,
'info' as status,
'Manual verification required. Check control description for more details.' as reason,
display_name as subscription
from
azure_subscription;

Tags