Obs/bin/GMA/Monitoring/Agent/initconfig/2.0/Standard/AzSecMdsSystemEventsOffline_AsmSysCmd_Powershell.xml

<?xml version="1.0" encoding="utf-8"?>
<MonitoringManagement version="1.0" timestamp="2023-06-08T00:58:42.4731192Z">
  <!-- Autogenerated version comment - DO NOT REMOVE: AzSecPackShipVersion=4.27.0.4 -->
  <Imports>
    <Import file="AzSecMdsSystemEventsOffline_AsmSysCmd_Powershell-Content.xml" forceLocal="true">
      <Condition>GetEnvironmentVariable("AZSECPACK_DISABLED") != "1" &amp;&amp; ((GetEnvironmentVariable("AZSECPACK_ENABLED_FEATURES") == "" &amp;&amp; RegexMatch(GetEnvironmentVariable("AZSECPACK_DISABLED_FEATURES"), "SystemSecurityPowerShell", 0, "i") == "") || (GetEnvironmentVariable("AZSECPACK_ENABLED_FEATURES") != "" &amp;&amp; RegexMatch(GetEnvironmentVariable("AZSECPACK_ENABLED_FEATURES"), "SystemSecurityPowerShell", 0, "i") != "" ))</Condition>
    </Import>
  </Imports>
</MonitoringManagement>