Microsoft about the availability of the package version (Advanced Threat Protection) for the Linux platform. The product is designed for proactive protection, tracking unpatched vulnerabilities, and detecting and mitigating malicious activity in the system. The platform combines an antivirus package, a network intrusion detection system, an exploit protection mechanism (including 0-day), advanced isolation tools, additional application management tools, and a system for detecting potentially harmful activity.
First release includes proactive protection tools and a command line toolkit for managing the agent, running scans (malware detection), responding to potential threats, and configuring EDR (Endpoint Detection and Response), which identifies possible attacks through behavior monitoring and activity analysis using machine learning methods. Support is claimed for RHEL 7.2+, CentOS Linux 7.2+, Ubuntu 16 LTS and later, SLES 12+, Debian 9+, and Oracle Linux 7.2.
Source: opennet.ru
