Microsoft Defender Now Supports Linux Desktops (neowin.net) 49
"Starting today, Linux desktops are now officially supported by Microsoft Defender," reports Neowin. A public preview of the threat detection app extends its enterprise security platform beyond servers to developer workstations running distributions such as Ubuntu, Debian, Fedora, and RHEL. The offering includes antivirus protection, endpoint detection and response, vulnerability management, threat hunting, and device isolation. From the report: Microsoft is also making it easier to onboard desktops through streamlined methods, offering a unified security operations experience, strengthened security, and improved response times. Organizations that are already familiar with securing Linux servers via Defender should feel right at home securing desktops too, as the experience is exactly the same. Defender knows whether it is securing a device in a data center, the cloud, or that it is owned by a developer and identifies them as such in inventory and security workflows.
As stated previously, all Linux server distros are supported via Defender on desktops too. These include RHEL, CentOS, Ubuntu, Debian, SLES, Fedora, and Oracle Linux, GNOME, KDE, and more. That said, you do need Microsoft Defender for Endpoint Plan 2 or a Microsoft 365 E5 and E7 subscription. You can enroll Defender on workstations using the same deployment methods you use for servers, but do check out the prerequisites here.
As stated previously, all Linux server distros are supported via Defender on desktops too. These include RHEL, CentOS, Ubuntu, Debian, SLES, Fedora, and Oracle Linux, GNOME, KDE, and more. That said, you do need Microsoft Defender for Endpoint Plan 2 or a Microsoft 365 E5 and E7 subscription. You can enroll Defender on workstations using the same deployment methods you use for servers, but do check out the prerequisites here.
Microsoft antivirus for Android (Score:2, Funny)
I remember when they introduced that. That was hilarious.
Why would I want this? (Score:4, Insightful)
Re: Why would I want this? (Score:2, Informative)
*You* would not want this.
However on endpoints vaguely related to your work, your employer *loves* excuses to give Microsoft money to invest as many endpoints as possible.
Re: Why would I want this? (Score:5, Funny)
I meant infested, not invested
Re: Why would I want this? (Score:5, Informative)
It's an external requirement in many cases. For contractual or legal reasons they need AV software on all machines, if it makes sense or not.
It's how utter crap like McAffee survives. It may be shit, but it fulfils a business need. Checks the box.
Re: (Score:2)
Re: (Score:3)
Exactly, it allows them to blame Microsoft and say that they followed "best practice".
Re: (Score:3)
Yeah, the "all systems must have antivirus" thing is a common problem. They don't seem to mind about 'appliances' like routers and switches, even though some of them seem to have problems on a weekly basis.
I've found you can (sometimes) say "All Macs have Filevault, so are running anti-virus already". For linux, install ClamAV, and then say "it's got anti virus".
However, the little pricks in IT often want to have it all report back to the central mothership - and that means installing some god awful pile of
Re: (Score:2)
It is the same problem as having to change your password every x days or weeks.
I once used a Mayan calendar and used the English name for day and month when I changed it, and sent a screenshot of the pic to my own email.
But with modern AI, such a screen shot (was actually a photo from paper) would be easy interpreted.
Re: (Score:3)
Same here, no thanks. Defender is just a waste of CPU cycles. If you configure a Linux "desktop" the way UN*X was intended no need for an AV.
Plus the title should be "Microsoft Defender Now Supports Linux systemd Desktops".
Re:Why would I want this? (Score:4, Insightful)
If you configure a Linux "desktop" the way UN*X was intended no need for an AV.
A security suite can do several useful jobs on a Unix/UNIX/Unixlike system. It can look for evidence of intrusion, or it can scan files to check for viruses which might affect the Windows systems in accounting. Also, there's no call to be snobby about Unix security because even if "only" a user is infected, they can easily wipe out any of the data to which they have write access. Then you're no more or less dependent on your backups than with any other OS.
Re: (Score:2)
Pair it up with Edge for linux.
oxymoron (Score:2)
Ok, paying for E5 or E7 and then using Linux is some kind of oxymoron. Take this over-priced Windows junk and put it on Linux. Wut?
Re: (Score:3)
For compliance.
To me, this sounds like a good thing because it means that there are enough Linux workstations in home and corporate environments that Microsoft customers are asking for this feature so that they can allow their users to utilize the OS that they are most comfortable with to access M365 services.
Defender is an important compliance tool that ensures certain fundamental things on the endpoint are in order.
And what come with this? Probably not fries... (Score:5, Insightful)
Microsoft Defender Now Supports Linux Desktops
Sounds like a vehicle for MS Telemetry.
Re: And what come with this? Probably not fries... (Score:4, Insightful)
Re: (Score:2)
Oh, the SlopCraft shills are everywhere, even here!
Next it will be bundled with Recall (Score:3, Insightful)
Because you all thought MS Telemetry wasn't enough of a privacy invasion.
Details (Score:5, Informative)
It is important to note that this article is referring to Microsoft Defender the enterprise security suite and not Windows Defender the antivirus software built into Windows. Microsoft Defender is a suite that includes central management and reporting, EDR, DLP, email filtering and more. In contrast Windows defender is a limited antivirus component of the Microsoft Defender suite.
Windows Defender isn't bad. It's not the best, at the moment, but it's not bad at all. On Windows.
I cannot see myself installing Microsoft Defender or Windows Defender on Linux. But, I can see companies subscribed to the M365 platform being forced to install Microsoft Defender for insurance and compliance purposes. If I had to, I guess I'd prefer to be able to add Linux to the existing security suite, rather than having to manage another platform for Linux support.
Therefore I'm declaring Microsoft Defender for Linux as a good thing. I'll allow it.
Re:Details (Score:5, Insightful)
Re:Details (Score:5, Interesting)
What bullshit? The word enterprise should literally be translated to mean "It doesn't affect me personally, and is only relevant if my company is a Microsoft shop, in which case we already pay millions to subscription bullshit."
The reality is Defender is an enterprise suite. If you use it you use it, if you don't you don't. All this is doing is making it MORE LIKELY enterprises can adopt Linux if you are using it.
Re: (Score:3)
Defender heuristics is dangerous (Score:5, Interesting)
Re: Defender heuristics is dangerous (Score:1)
Every "IT security" product in existence is there to let some phb check a box first and uptime or even basic usability is an afterthought.
I spend a non-negligible amount of my time finding workarounds for the IT-weenies' security "improvements." I need to send a fucking packet, not spend half a day figuring out all the settings I need to tweak to let it happen.
Re: (Score:1)
I'll take "Things that didn't happen" for $500, Bob
Let us scan your files for malware (Score:4, Insightful)
And while we are there, let us index things and send them up to our cloud for, you know, sampling and training purposes. Not to train our super intelligence, mind you. Trust us. We would never do that without your consent. This may or may not be hidden in the fine print of one of our terms of service, agreements or other rules at any certain point in time in between your access to the Microsoft website and the tool execution.
We are friends. We love Linux. We will not disappoint you.
Re: (Score:3, Funny)
This is enterprise software. No one is sending things to the cloud without you paying for the privilege. Also the FBI wasn't involved in the world trade centre and the moon landing was real. Hope this helps you with your truth seeking.
Re: (Score:2)
We are friends. We love Linux.
Yes. I can feel Microsoft's hands on my shoulders already. Shame they won't let me turn around.
Obligatory statement (Score:2)
Bill Gates should burn in Hell.
Re: (Score:2)
Ahh, yes the UID checks out. Most slashdotters these days probably don't even know who Bill Gates was.
Re: (Score:2)
OMG!
Am I out of the loop and he is gone?
Party or 8760 hours of silence?
Re: (Score:2)
Don't forget the "Fuck Steve Ballmer" either. Let's add SCO to the list as well. Fuck them!
Massive Boost in Linux Viruses Aren't Far Behind (Score:2)
The last time I had to install this (Score:3)
piece of crap, it was so incredibly bad that we decided to install the binary so that the security peeps were happy, and then we disabled the service.
It was making our servers unusable, and they refused to fix it when we opened tickets.
Hell is going to be frozen over.... (Score:2)
Before I EVER put a Microslop product on my Linux systems...
Seems like an odd choice (Score:2)
I understand when Microsoft tries to adopt something from the Linux community. I do not understand how they imagine the typical Linux proponent (corporate or individual) would be interested in the reverse.
Nothing good can happen; it can only bad happen. (Score:2)
No thanks (Score:2)
Hah, I just finished removing all microsoft products from my life - pass, 100%, I doubt I'll be back, I certainly won't be installing their telemetry onto my new devices.
yes... (Score:1)
Linux Desktop (Score:2)
In all the years of Linux use on the Desktop I never caught a Virus. I know that they do exist but it doesnot appear to be a friendly environment for these creatures. What does Defender want to catch or is that just a backdoor for US agencies on your machine?
Growing popularity? (Score:2)
That sounds easy ... (Score:2)
It has nothing to do, or?
Here's your chance! (Score:2)
Note to all you MAGA supporters: Here's an opportunity to beat your chests and vent your grievances against immigration, while actually garnering support from hard-Left Democratic Socialists like me!
Build a (fire)wall and make Microsoft pay for it! Deport the Microsoftian immigrants from Linuxland!