4 ms·
Microsoft Defender for Linux is coming. This is what you need to know
- modzu 7y agolol the last thing id do on my linux boxes is set them up to report to microsoft
- kjaftaedi 7y agoThis may come as a surprise to you, but you are not the intended audience.
- diffeomorphism 7y agoIf people running linux are not the intended audience, then who is?
- TomMarius 7y agoCertainly there are more kinds of people running Linux
- touristtam 7y agoThe people that make the purchase decision, not the technies running the boxes. Just a guess.
- jpalomaki 7y agoLikely companies that are already very much into Microsoft with Azure, Windows 10, Office/Microsoft 365 and also have some Linux boxes that require this kind of protection (maybe for compliance reasons).
- tyingq 7y agoIf some auditor is forcing your org to have this type of product on Linux, it's probably better than the alternatives.
- badrabbit 7y agoFYI, this isn't your typical AV, this is expanding their EDR+NGAV offering. Their competition supports Linux but they don't so customers with Linux servers have to buy two EDR products. This will solve that problem by letting you expand that super expensive E5 license to Linux and OS X and kick out other EDR solutions. Defender ATP is quite special. There are better competitors but Defender has the advantage of being able to access Windows telemetry across all windows installs, Office365 telemetry for their threat intel and being able to literally walk to NT kernel dev's cubicle if they have a question or need a feature plus Azure as their backend! So this really is welcome news from a corporate security perspective but I would never install this on personal desktops or servers just like I wouldn't install Crowdstrike Falcon either (the leading EDR vendor), because privacy.
- accountuser 7y agoWhat's your advice to protect personal machines ?
- zenlibs 7y agoWhat is the drawback of crowdstrike on a personal machine? What are the alternatives?
- badrabbit 7y agoEvery single thing you do is logged in their cloud. If you can accept that,nothing wrong with using SaaS EDRs.
- mcdevilkiller 7y agoIs it, too, going to use 15% of CPU when doing intensive tasks?