AzStackHciStandaloneObservability/package/bin/GMA/Monitoring/Agent/Extensions/AzureSecurityPack/AzureSecurityPackConfiguration.xml

<?xml version="1.0" encoding="utf-8"?>
<AzureSecurityPack xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" service="AzSecPackDefault" timestamp="2022-09-09T18:03:56.1419942Z" version="4.22.0.2">
  <!-- Autogenerated version comment - DO NOT REMOVE: AzSecPackShipVersion=4.22.0.2 -->
  <Features>
    <Feature name="Audit" enabled="true">
      <StartupCommand isScript="true">AuditInstaller.cmd</StartupCommand>
      <MemoryLimitInMB>100</MemoryLimitInMB>
    </Feature>
    <Feature name="LegacyAudit" enabled="false">
      <StartupCommand isScript="true">LegacyAuditInstaller.cmd</StartupCommand>
      <MemoryLimitInMB>100</MemoryLimitInMB>
    </Feature>
    <Feature name="AzCertInstaller" enabled="true">
      <StartupCommand isScript="true">AzCertInstaller.cmd</StartupCommand>
      <MemoryLimitInMB>100</MemoryLimitInMB>
    </Feature>
    <Feature name="Antimalware" enabled="true">
      <StartupCommand>AntimalwareInstall.cmd</StartupCommand>
      <MemoryLimitInMB>100</MemoryLimitInMB>
    </Feature>
    <Feature name="AsmScan" enabled="true">
      <StartupCommand>AsmScan.bat</StartupCommand>
      <MemoryLimitInMB>100</MemoryLimitInMB>
    </Feature>
    <Feature name="SystemSecurityLog" enabled="true">
      <StartupCommand isScript="true">SlamAuditPolicy.cmd</StartupCommand>
      <MemoryLimitInMB>100</MemoryLimitInMB>
    </Feature>
    <Feature name="AppLocker" enabled="true">
      <StartupCommand isScript="true">EnableAppLocker.cmd</StartupCommand>
      <DisableCommand isScript="true">DisableAppLocker.cmd</DisableCommand>
      <MemoryLimitInMB>100</MemoryLimitInMB>
    </Feature>
    <Feature name="CodeIntegrity" enabled="true">
      <StartupCommand isScript="true">EnableCodeIntegrity.cmd</StartupCommand>
      <DisableCommand isScript="true">DisableCodeIntegrity.cmd</DisableCommand>
      <MemoryLimitInMB>100</MemoryLimitInMB>
    </Feature>
    <Feature name="CertInUse" enabled="true" isPilot="true">
      <StartupCommand isScript="true">EnableCertInUse.cmd</StartupCommand>
      <DisableCommand isScript="true">DisableCertInUse.cmd</DisableCommand>
      <MemoryLimitInMB>100</MemoryLimitInMB>
    </Feature>
    <Feature name="WDATP" enabled="true">
      <StartupCommand isScript="true">WDATPPilot.cmd</StartupCommand>
      <MemoryLimitInMB>100</MemoryLimitInMB>
    </Feature>
    <Feature name="USBPnpEvent" enabled="true" isPilot="true">
      <StartupCommand isScript="true">USBEventEnablePilot.cmd</StartupCommand>
      <MemoryLimitInMB>100</MemoryLimitInMB>
    </Feature>
    <Feature name="SpecialPriviligesAudit" enabled="true" isPilot="true">
      <StartupCommand isScript="true">NewLogonSpecialPrivileges.cmd</StartupCommand>
      <MemoryLimitInMB>100</MemoryLimitInMB>
    </Feature>
    <Feature name="ADDataReplicationAudit" enabled="true" isPilot="true">
      <StartupCommand isScript="true">ActiveDirectoryDataReplication.cmd</StartupCommand>
      <MemoryLimitInMB>100</MemoryLimitInMB>
    </Feature>
    <Feature name="CertificateExport" enabled="true" isPilot="true">
      <StartupCommand isScript="true">EnableWindowsAuditPermission.cmd</StartupCommand>
      <DisableCommand isScript="true">DisableWindowsAuditPermission.cmd</DisableCommand>
      <MemoryLimitInMB>100</MemoryLimitInMB>
    </Feature>
  </Features>
</AzureSecurityPack>