VM extension is some kind of script that will run after the ARM deployment has finished. You can set up a VM extension in the ARM Portal, depending on the operating system, as follows.
A Windows VM provides three different solutions:
Custom Scripts ExtensionMicrosoft AntimalwareextensionPowerShell Desired State Configurationextension
In the following screenshot the three different resources are illustrated:
The easiest VM extension is one that installs a Microsoft Antimalware extension:
With Microsoft Antimalware, you will get a valid solution for antimalware and antivirus on your Windows Server instance that provides an industrial standard with valid antimalware and antivirus patterns. You will not have to use any other third-party vendor solution for it. As of today, with Azure Stack, it is only available for Windows VMs.
