MEDIUM
Source
CloudSploit
ID
application-whitelisting-enabled

Application Whitelisting Enabled

Ensures that Microsoft Defender Monitor Adaptive Application Whitelisting is enabled.

Adaptive application controls work in conjunction with machine learning to analyze processes running in a VM and help control which applications can run, hardening the VM against malware.

Enable Adaptive Application Controls for Virtual Machines from the Microsoft Defender for Cloud by ensuring AuditIfNotExists setting is used.