Skip to content

Commit 5113118

Browse files
authored
Update linux-whatsnew.md
1 parent ded8a7e commit 5113118

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

defender-endpoint/linux-whatsnew.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -58,7 +58,7 @@ This article is updated frequently to let you know what's new in the latest rele
5858

5959
**What's new**
6060

61-
- Starting this version, Microsoft defender for Endpoint for Linux will no longer support AuditD as a supplementary event provider. For improved stability and performance, we have completely transitioned to eBPF. If you disable eBPF or in the event eBPF is not supported on any specific kernel, microsoft defender for endpoint for Linux will automatically switch back to Netlink as a fallback supplementary event provider. Netlink will provide reduced functionality and track only process related events. In this case, all process operations will continue to flow seamlessly, but you may miss out on specific file and socket-related events that eBPF would otherwise capture. For more details refer- [linux-support-ebpf.md](linux-support-ebpf.md). If you have any concerns or need assistance during this transition, contact support.
61+
- Starting this version, Microsoft Defender for Endpoint on Linux no longer supports `AuditD` as a supplementary event provider. For improved stability and performance, we have completely transitioned to eBPF. If you disable eBPF, or in the event eBPF is not supported on any specific kernel, Defender for Endpoint on Linux automatically switches back to Netlink as a fallback supplementary event provider. Netlink provides reduced functionality and tracks only process-related events. In this case, all process operations continue to flow seamlessly, but you could miss specific file and socket-related events that eBPF would otherwise capture. For more details, see [linux-support-ebpf.md](linux-support-ebpf.md). If you have any concerns or need assistance during this transition, contact support.
6262
- Stability and performance improvements
6363
- Other bug fixes
6464

0 commit comments

Comments
 (0)