What Changed
Enhanced documentation for the Rare Custom Script Extension hunting query, adding clarification about protected settings behavior and removing formatting inconsistencies.
Documentation Improvements
- Added explanatory note about protected settings encryption: when fileUris and commandToExecute are configured under Protected Settings, their values appear masked in AzureActivity logs by design
- Clarified that execution details must be reviewed from Guest VM logs rather than AzureActivity when protected settings are used
- Included reference link to Microsoft documentation
- Fixed minor formatting issues in description text
Affected Files
Solutions/Azure Activity/Hunting Queries/Rare_Custom_Script_Extension.yaml
(packaging artefacts: 3.0.4.zip, ReleaseNotes.md, createUiDefinition.json, mainTemplate.json)