Decouple Detection and Remediation types
When creating Configuration Items, it would be nice if we could combine different detection and remediation types. For example, combining a Registry detection rule that would remediate with a PowerShell script.
Зеленов Владимир commented
I think it's a good idea!
Chris Muster commented
That's exactly what I want, an option for specifying a script remediation for any detection type. I don't particularly like using a separate remediation script as it's more difficult to see which remediation script is related to a particular CI. I can use the application model to solve this as well (the app model is good at running scripts based on registry / file system rules), but I want my compliance related things (both detection and remediation) consolidated inside of the compliance settings area.
Mark Godfrey commented
You can already do this now by creating a collection linked to the compliant/non-compliant devices and deploying your script to that.
Are you wanting somethink like a pane in the auto-remediate area to just spit your script text in it?