Hi r0r0z0r0,

the exclusions I used for the guide are just for reference. Just to understand how to add exclusions.
You need to change the exclusions to much your needs.

e.g “.log;.ldf” is for Microsoft SQL servers, to exclude the log files.
“D:\\IISlogs; is for IIS servers, to exclude the log files. etc…

We’ve been getting Azure Security Center alert when deploying Antimalware with exclusions in ARM template(just following the default exclusions). May I know why do these exclusions?
“Exclusions”: {
“Extensions”: “.log;.ldf”,
“Paths”: “D:\\IISlogs;D:\\DatabaseLogs”,
“Processes”: “mssence.svc”
}

I just run the “The whole script” to enable Antimalware at my devrgvm. There was some typos, I corrected them at the script above.

Now, after adding all variables I run the command succesfully:

PS C:\> Set-AzVMExtension -ResourceGroupName $ResourceGroupName -VMName $VMName -Name $Type -Publisher $PublisherName -ExtensionType $Type -SettingString $amsettings -Location $Location -TypeHandlerVersion $amversion

RequestId IsSuccessStatusCode StatusCode ReasonPhrase
——— ——————- ———- ————
True OK OK