Microsoft Defender for Linux is coming. This is what you need to know(techrepublic.com)
techrepublic.com
Microsoft Defender for Linux is coming. This is what you need to know
https://www.techrepublic.com/article/microsoft-defender-for-linux-is-coming-this-is-what-you-need-to-know/
3 comments
lol the last thing id do on my linux boxes is set them up to report to microsoft
This may come as a surprise to you, but you are not the intended audience.
If people running linux are not the intended audience, then who is?
Likely companies that are already very much into Microsoft with Azure, Windows 10, Office/Microsoft 365 and also have some Linux boxes that require this kind of protection (maybe for compliance reasons).
Certainly there are more kinds of people running Linux
The people that make the purchase decision, not the technies running the boxes. Just a guess.
If some auditor is forcing your org to have this type of product on Linux, it's probably better than the alternatives.
Is it, too, going to use 15% of CPU when doing intensive tasks?
Defender ATP is quite special. There are better competitors but Defender has the advantage of being able to access Windows telemetry across all windows installs, Office365 telemetry for their threat intel and being able to literally walk to NT kernel dev's cubicle if they have a question or need a feature plus Azure as their backend!
So this really is welcome news from a corporate security perspective but I would never install this on personal desktops or servers just like I wouldn't install Crowdstrike Falcon either (the leading EDR vendor), because privacy.