Windows 10: Defender Endpoint Protection for Linux - Threat Status not supported

Gavlarc · May 16, 2022

Hi,I have deployed Defender for Endpoint to a number of Linux Azure VMs and successfully onboarded them to the Microsoft 365 Defender portal. However, in my Log Analytics ProtectionStatus table,I see the following values for threat status:Threat status - UnknownThreatStatusDetails - Threat Status is currently not supported in MDATP ThreatStausRank - 470Can someone please confirm if this is simply a case of it not being supported for Linux RHEL 8.x in my case, or is there a configuration required somewhere that I'm missing.ProtectionStatus looks okrotectionStatis - Real time protectionProt

:)

Brink · May 16, 2022

Microsoft Defender for Endpoint now supports Windows 10 on Arm devices

Today, we are excited to announce that Microsoft Defender for Endpoint support of Windows 10 on Arm devices is generally available. This expanded support is part of our continued efforts to extend Microsoft Defender for Endpoint capabilities across all the endpoints defenders need to secure.

Arm technology is enabling the digital transformation with innovative new form factors, better connectivity and mobile possibilities, instant-on technology, and amazing battery life. These elements also empower organizations to support the shift to remote and fluid work environments – a shift that requires a security-first mindset. As we continue to move forward in a new hybrid work environment, security needs to be an integral part of that change. Microsoft is committed to empowering defenders in their daily efforts to protect their organizations’ data and employees. This commitment is deeply ingrained in our DNA and reflected in the product investments that we make.

Microsoft’s investment in Windows 10 on Arm offers powerful, highly-mobile experiences, with security at the core. These devices are designed to take full advantage of the built-in protections available in Windows 10 such as encryption, data protection, and next gen antivirus and antimalware capabilities. Microsoft Defender for Endpoint compliments these security features with an industry leading, unified, cloud powered enterprise endpoint security platform that helps security teams prevent, detect, investigate and respond to advanced threats, while delivering secure and productive end user security experiences.

Security teams will find that there are no changes to the experience with regards to Arm based PCs. All the data, insights, and functionality in Microsoft Defender for Endpoint is exactly the same as its always been including things like device inventory, alerts, response actions, advanced hunting, and more, including the onboarding experience.

As always, many of our feature and capability enhancements and investments are driven by customer feedback. We thank our customers for their continued journey with us.

Microsoft Defender for Endpoint is an industry leading, cloud powered endpoint security solution offering vulnerability management, endpoint protection, endpoint detection and response, and mobile threat defense. With our solution, threats are no match. If you’re not yet taking advantage of Microsoft’s unrivaled threat optics and proven capabilities, sign up for a free Microsoft Defender for Endpoint trial today.
Click to expand...

Source: https://www.microsoft.com/security/b...ows-10-on-arm/

Tweet

— Twitter API (@user) View on Twitter
Click to expand...

Brink · May 16, 2022

Microsoft Defender for Endpoint on iOS is now generally available

Today, we’re excited to announce that Microsoft has reached a new milestone in our cross-platform security commitment with the general availability of our iOS offering for Microsoft Defender for Endpoint, which adds to the already existing Defender offerings on macOS, Linux, and Android.This release delivers the rich set of capabilities we announced in public preview, including anti-phishing, blocking unsafe connections, and custom Indicators. In addition, it offers a unified security experience through the Microsoft Defender Security Center, where security teams can get a centralized view of alerts, incidents, and gain additional context to remediate threats across all endpoints.

The threats on mobile are unique, with phishing being the biggest and fastest growing threat. More than 85% of these attacks take place outside of email through phishing websites, messaging apps, games, and other apps. Phishing is where we believe we bring the strength of the Microsoft security platform to bear. The scale of our service gives us extensive visibility into the billions of phishing attacks and social engineering techniques our customers face and enables us to detect and prevent these attacks on mobile.

Since our public preview announcement, we have also updated how users can get the Microsoft Defender for Endpoint app on their iOS devices. Now, eligible users can download Microsoft Defender for Endpoint from App Store.

For more information, including system requirements, prerequisites, deployment, and configuration instructions visit our documentation.

In the iOS app, to share feedback, you can use the “send feedback” option:

Increasing coverage for Android to include fully managed devices

We are also excited to share the general availability for Microsoft Defender for Endpoint (Android) support for Android Enterprise fully managed devices. This adds to the already existing support for installation on enrolled devices for the legacy Device Administrator and Android Enterprise Work Profile modes.

Android Enterprise fully managed devices are corporate-owned devices associated with a single user and used exclusively for work and not personal use. Admins can manage the entire device and enforce policy controls to work profiles, such as:

Allowing app installation only from managed Google Play

Blocking uninstallation of managed apps

Preventing users from factory resetting devices

With this change, Android Enterprise fully managed devices will get the full capabilities of our offering on Android including phishing and web protection, malware scanning, and additional breach prevention through integration with Microsoft Endpoint Manager and Conditional Access.

For more details, please refer to the documentation here.

Simplifying onboarding for Android users

As a part of our commitment to continuously improve the experience for end users, we are now also simplifying end user onboarding. Till now, end users needed to provide VPN permissions to allow the Android and iOS apps to provide anti-phishing protection. With this update, admins will be able to setup configuration and push the device profile for VPN to their users' devices so that VPN related permissions will not have to be provided by end users, thus simplifying their experience.

For more details, please refer to the documentation here.

We’re excited to be bringing these additional capabilities into mobile threat defense and look forward to hearing about your experiences and your feedback. If you’re not yet taking advantage of Microsoft’s industry leading optics and endpoint detection capabilities, sign up for a free trial of Microsoft Defender Endpoint today.
Click to expand...

Source: https://techcommunity.microsoft.com/...e/ba-p/1962420

Download: Microsoft Defender ATP on the App Store

Majulook · May 16, 2022

Windows Defender Protection History - Unable to remove threat entry

In another thread....

Hey, what you need to do is so simple, just follow the steps below exactly in order:

Turn OFF Real-time Protection

Turn OFF Cloud-delivered Protection

Go to this folder C:\ProgramData\Microsoft\Windows Defender\Scans\History\Service

Delete the contents in the folder

Turn ON Real-time Protection

Turn ON Cloud-delivered Protection

That's it... Now check protection History, it's empty.
Done!
Click to expand...

Windows 10: Defender Endpoint Protection for Linux - Threat Status not supported

Defender Endpoint Protection for Linux - Threat Status not supported

Defender Endpoint Protection for Linux - Threat Status not supported

Defender Endpoint Protection for Linux - Threat Status not supported

Defender Endpoint Protection for Linux - Threat Status not supported - Similar Threads - Defender Endpoint Protection

microsoft virus and threat protection support

microsoft virus and threat protection support

Windows Defender Endpoint Protection Scam

Windows Defender Endpoint Protection Scam

Win defender threat protection

Win defender threat protection

Win defender threat protection

"Unknown" status under "Virus & Threat protection"

"Unknown" status under "Virus & Threat protection"