Software Installation Using Azure Policy State Change Events

LeonardEsereThank you. It seems working for me now.

Just a query, The Script you have posted in last is it for falcon sensor install on Linux VM?

If you can help to validate below one.

Param([object]$WebhookData)

$eventData = (ConvertFrom-Json -InputObject $WebhookData.RequestBody)

if ($eventData.subject -match 'microsoft.compute/virtualmachines') {
$vmName = $eventData.subject.Split('/')[8]
$vmResourceGroupName = $eventData.subject.Split('/')[4]

Connect-AzAccount -Identity

## Install sensor into the Windows Server

$scriptBlock = @'
Invoke-WebRequest -Uri https://applicationlocation/installer.ps1 -Outfile installer.ps1; .\installer.ps1 -FalconClientId <cid> -FalconClientSecret <csecret>

'@

$scriptBlock | Out-File $env:Temp\installer.ps1
Invoke-AzVMRunCommand -ResourceGroupName $vmResourceGroupName -VMName $vmName -ScriptPath $env:Temp\installer.ps1 -CommandId 'RunPowerShellScript' -Verbose
}
else {
Write-Output "Event subject does not match microsoft.compute"
}