Obs/bin/GMA/Monitoring/Agent/initconfig/2.0/Standard/AzSecMdsSystemEventsOffline_AsmSysCmd_Powershell.xml
<?xml version="1.0" encoding="utf-8"?>
<MonitoringManagement version="1.0" timestamp="2023-06-08T00:58:42.4731192Z"> <!-- Autogenerated version comment - DO NOT REMOVE: AzSecPackShipVersion=4.27.0.4 --> <Imports> <Import file="AzSecMdsSystemEventsOffline_AsmSysCmd_Powershell-Content.xml" forceLocal="true"> <Condition>GetEnvironmentVariable("AZSECPACK_DISABLED") != "1" && ((GetEnvironmentVariable("AZSECPACK_ENABLED_FEATURES") == "" && RegexMatch(GetEnvironmentVariable("AZSECPACK_DISABLED_FEATURES"), "SystemSecurityPowerShell", 0, "i") == "") || (GetEnvironmentVariable("AZSECPACK_ENABLED_FEATURES") != "" && RegexMatch(GetEnvironmentVariable("AZSECPACK_ENABLED_FEATURES"), "SystemSecurityPowerShell", 0, "i") != "" ))</Condition> </Import> </Imports> </MonitoringManagement> |