Forum Discussion
Customized Security Center Audit Policy
I wanted to add a few extra controls in the /opt/microsoft/omsagent/plugin/oms_audits.xml. For eg. I wanted to add some controls from CIS Benchmark Kindly help me out please. Also i chang...
gugovind
Microsoft
Microsoftkmanish Currently, we do not support either of the scenarios to customize security baseline or to increase baseline assessment frequency. The default behavior for changes will be as below:
1. Any change to oms_audits.xml will result in omsbaseline rejecting the file as corrupted. The file will get reset withing 15 minutes by omsconfig.
2. The file 'security_baseline.conf' mentioned is managed by the nxOMSPlugin DSC module and will reset the file to “desired state” within 15 minutes.
Long term, Azure intents to support customization security baselines via In-Guest policy. We do not have a definitive timeline for it.