Microsoft Advanced Threat Protection for Linux

Microsoft Defender Advanced Threat Protection (MD ATP) support for Linux with kernel version 3.10.0-327 or later, including the following Linux flavours :

• Red Hat Enterprise Linux 7.2 or higher
• CentOS 7.2 or higher
• Ubuntu 16.04 LTS or higher LTS
• Debian 9 or higher
• SUSE Linux Enterprise Server 12 or higher
• Oracle Linux 7.2 or higher

Deployment MD ATP prerequisite:

• Administrative privileges on the device (in case of manual deployment) 
• The fanotify kernel option must be enabled,
• For RedHat Enterprise Linux 7.x and CentOS 7.x systems, the kernel module is enabled by default.
• For Ubuntu, SUSE, and Oracle Enterprise Limited, Fanotify is enabled by default.
• Disk space: 650 MB 
• No other fanotify-based security solutions running on same Linux Computer. 
• Network connections
• Set firewall outbound connection rules to allow these URLs.    

Weiterlesen.


Gruß,
Dani