It would be great if, as part of provisioning a new VM, you could specify that Microsoft Anti-Malware (or other products) is to be installed as well. Current work-around is to push it out afterwards from Security Center but this allows for a little too much human error
Thanks for submitting the idea! In general, DevTest Labs allows (and encourages) you to create an artifact to install your software. Does it work with you? This document shows you how to create custom artifacts: https://azure.microsoft.com/en-us/documentation/articles/devtest-lab-artifact-author/.