Antivirus audit mode for Linux
Provides real-time malware detection and alerting without automatically quarantining files or terminating processes. This enables organizations to evaluate Defender detection efficacy and performance on sensitive workloads before enabling enforcement.Available in Microsoft Defender for Endpoint on Linux version 101.26062.0007 or later.
Documentation: Antivirus audit mode for Linux
Terms in this update
This is in the weekly digest for week 40 · What changed this week? →
More Defender for Endpoint updates
Memory scan for Linux
Microsoft Defender for Endpoint plug-in support for WSL containers (WSLc)
Microsoft Defender support for Linux Desktops
New Microsoft Secure Score recommendations for AI-Readiness
Offboarding API support for Linux
Tamper protection in audit mode for Linux
Text by Microsoft, from Microsoft's documentation. Features and dates may change. Terms and the timeline are added by 365Fanatic.
