SecurityInsight settings · Settings > Sign-in & Azure resources
Hold template packs
| Key | SI_InvardiaUpdate_HoldMicrosoftContent |
|---|---|
| Where | Settings > Sign-in & Azure resources > Licence and updates |
| Type | On / off |
| Default | Off: template packs are installed automatically |
| Edition | pro |
What it does
Whether new template packs wait for you. Between releases SecurityInsight ships template packs: reports and rules for data that Microsoft added to Defender and the Exposure Graph, such as a new attack-path type, and updates to the templates SecurityInsight ships. Normally the updater job installs them by itself once your installation runs the SecurityInsight version a pack needs; your own changes are never overwritten by a pack.
When enabled
a template pack is kept on the Template releases page, with what it changes, until you select Install there.
When disabled
it is installed automatically the next time the updater job runs. Your own changes to templates are never touched either way, and an installed pack can be rolled back on Template releases.
Risk and how to reverse it
Affects how the jobs sign in or which Azure resources they use. A wrong value stops the affected jobs at their next run (nothing is changed or deleted); a broader identity or right gives the jobs more access than they need. Reversible: correct it and run again.
Requires
A SecurityInsight Pro licence.
Recommended
Keep the default. Change it when: Turn it on when every change to what SecurityInsight reports must be reviewed first, for example during a change freeze or an audit.
Documented for SecurityInsight 3.0.79. Written by the SecurityInsight team; Invardia publishes it. · All settings · Security review pack