Path Lines of Code Remediation scripts/Create Azure RBAC Role based on CIEM access report/Create Azure RBAC Role based on CIEM access report.ps1 496 Remediation scripts/Customize Endpoint Protection Recommendation/Modules/EndPointProtectionDSC/AzureGuestConfigurationPolicy/AzureGuestPolicyHelper.psm1 237 Remediation scripts/Customize Endpoint Protection Recommendation/Modules/EndPointProtectionDSC/AzureGuestConfigurationPolicy/Configurations/MonitorAntivirus.ps1 15 Remediation scripts/Customize Endpoint Protection Recommendation/Modules/EndPointProtectionDSC/AzureGuestConfigurationPolicy/ParameterFiles/EPAntivirusStatus.Params.psd1 12 Remediation scripts/Customize Endpoint Protection Recommendation/Modules/EndPointProtectionDSC/DSCResources/MSFT_EPAntivirusStatus/MSFT_EPAntivirusStatus.psm1 293 Remediation scripts/Customize Endpoint Protection Recommendation/Modules/EndPointProtectionDSC/EndPointProtectionDSC.psd1 80 Remediation scripts/DDoS Protection Standard should be enabled/PowerShell/Enable-AzSecurityDDOSProtection.ps1 50 Remediation scripts/Disk encryption should be applied on virtual machines/Powershell/Enable-AzureVMDiskEncryption.ps1 102 Remediation scripts/Enable Network Security Groups on subnets/PowerShell/Enable-NSGinSubnet.ps1 42 Remediation scripts/Enable auditing for the SQL server/PowerShell/Enable-AzSecuritySQLAuditing.ps1 71 Remediation scripts/Enable the built-in vulnerability assessment solution on virtual machines (powered by Qualys)/PowerShell/qualys-remediate-unhealthy-vms.ps1 52 Remediation scripts/Enable the built-in vulnerability assessment solution on virtual machines/PowerShell/Windows/Check-VA-VMExtension.ps1 63 Remediation scripts/Enable the built-in vulnerability assessment solution on virtual machines/PowerShell/Windows/Install-VA-VMExtention.ps1 59 Remediation scripts/Enable transparent data encryption on SQL databases/PowerShell/Set-Sql-Transparant-Data-Encryption.ps1 13 Remediation scripts/Function App should only be accessible over HTTPs/PowerShell/Set-FunctionAppHttpsOnly.ps1 5 Remediation scripts/IP forwarding on your virtual machine should be disabled/Powershell/DisableIpforwarder.ps1 5 Remediation scripts/Install Monitring Agent on VMSS/PowerShell/Install_VMSS.ps1 25 Remediation scripts/Install monitoring agent on VMSS/PowerShell/Install_VMSS.ps1 25 Remediation scripts/Install monitoring agent on your machines/PowerShell/Check-MMA-VMExtension.ps1 61 Remediation scripts/Install monitoring agent on your machines/PowerShell/Install-MMA-VMExtension.ps1 87 Remediation scripts/Management ports of virtual machines should be protected with just-in-time network access control/PowerShell/Archive/Enable-JIT.ps1 76 Remediation scripts/Management ports of virtual machines should be protected with just-in-time network access control/PowerShell/Enable-JITVM.ps1 42 Remediation scripts/Provision an Azure AD Administrator on SQL Server/PowerShell/Add-ADadminToSql.ps1 42 Remediation scripts/Remove External Accounts/PowerShell/Remove-external-accounts-from-your-subscription.ps1 25 Remediation scripts/Remove deprecated accounts from subscriptions/PowerShell/Remove-deprecated-accounts-from-subscriptions.ps1 26 Remediation scripts/Require secure transfer to storage account/PowerShell/Enable-AzSecuritySecureTransfer.ps1 35 Remediation scripts/Restrict access to App Services/PowerShell/Restrict-AzSecurityWebApps.ps1 94 Remediation scripts/Restrict access to storage accounts with firewall and virtual network configurations/PowerShell/Restrict-AzSecurityStorageAccounts.ps1 79 Remediation scripts/Vulnerability assessment should be enabled on your SQL managed instances/PowerShell/Enable-AzSecuritySQLMIVA.ps1 36 Remediation scripts/Vulnerability assessment should be enabled on your SQL servers/PowerShell/Enable-AzSecuritySQLVA.ps1 36 Remediation scripts/Web Application should only be accessible over HTTPS/PowerShell/Set-WebAppHttpsOnly.ps1 5