Query: Windows Defender Exploit Guard should be enabled on your machines

Description

Windows Defender Exploit Guard uses the Azure Policy Guest Configuration agent. Exploit Guard has four components that are designed to lock down devices against a wide variety of attack vectors and block behaviors commonly used in malware attacks while enabling enterprises to balance their security risk and productivity requirements (Windows only).

Query

Tables used in this query:

• azure_compute_virtual_machine
• azure_subscription

Controls using this query:

• Windows Defender Exploit Guard should be enabled on your machines

SQL