You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: defender-endpoint/mde-linux-prerequisites.md
+12-11Lines changed: 12 additions & 11 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -15,7 +15,7 @@ ms.collection:
15
15
ms.topic: conceptual
16
16
ms.subservice: linux
17
17
search.appverid: met150
18
-
ms.date: 04/08/2025
18
+
ms.date: 06/30/2025
19
19
---
20
20
21
21
# Prerequisites for Microsoft Defender for Endpoint on Linux
@@ -117,8 +117,7 @@ The following Linux server distributions and x64 (AMD64/EM64T) versions are supp
117
117
> The workstation and desktop versions of these distributions are unsupported
118
118
> Distributions and versions that aren't explicitly listed are unsupported (even if they're derived from the officially supported distributions).
119
119
> After a new package version is released, support for the previous two versions is reduced to technical support only. Versions older than that which are listed in this section are provided for technical upgrade support only.
120
-
> Currently, Rocky and Alma distributions aren't supported in Microsoft Defender Vulnerability Management. However, Microsoft Defender for Endpoint is kernel-version agnostic for all other supported distributions and versions.
121
-
> The minimal requirement for the kernel version is `3.10.0-327` or later.
120
+
> Microsoft Defender for Endpoint is kernel-version agnostic for all other supported distributions and versions. The minimal requirement for the kernel version is `3.10.0-327` or later.
122
121
123
122
> [!WARNING]
124
123
> Running Defender for Endpoint on Linux with other fanotify-based security solutions isn't supported. It can lead to unpredictable results, including hanging the operating system.
@@ -186,12 +185,14 @@ If the Microsoft Defender for Endpoint installation fails due to missing depende
186
185
> - The mdatp RPM package requires `audit`, `semanage`.
187
186
> - For DEBIAN, the mdatp package requires `auditd`.
188
187
> - For Mariner, the mdatp package requires `audit`.
> - The `mde-netfilter` package also has the following package dependencies:
193
-
- For DEBIAN, the mde-netfilter package requires `libnetfilter-queue1` and `libglib2.0-0`
194
-
- For RPM, the mde-netfilter package requires `libmnl`, `libnfnetlink`, `libnetfilter_queue`, and `glib2`
188
+
>
189
+
> For versions older than `101.25032.0000`, the following requirements apply:
190
+
> - RPM package needs: `mde-netfilter` and `pcre`
191
+
> - DEBIAN package needs: `mde-netfilter` and `libpcre3`
192
+
>
193
+
> The `mde-netfilter` package also has the following package dependencies:
194
+
> - For DEBIAN, the `mde-netfilter` package requires `libnetfilter-queue1` and `libglib2.0-0`
195
+
> - For RPM, the `mde-netfilter` package requires `libmnl`, `libnfnetlink`, `libnetfilter_queue`, and `glib2`
195
196
196
197
## Installation instructions
197
198
@@ -226,5 +227,5 @@ If you experience any installation issues, self-troubleshooting resources are av
226
227
-[Troubleshoot missing events or alerts issues for Microsoft Defender for Endpoint on Linux](linux-support-events.md)
227
228
-[Troubleshoot performance issues for Microsoft Defender for Endpoint on Linux](linux-support-perf.md)
228
229
229
-
> [!TIP]
230
-
> Do you want to learn more? Engage with the Microsoft Security community in our Tech Community: [Microsoft Defender for Endpoint Tech Community](https://techcommunity.microsoft.com/category/microsoft-defender-for-endpoint/discussions/microsoftdefenderatp)
230
+
> [!TIP]
231
+
> Do you want to learn more? Engage with the Microsoft Security community in our Tech Community: [Microsoft Defender for Endpoint Tech Community](https://techcommunity.microsoft.com/category/microsoft-defender-for-endpoint/discussions/microsoftdefenderatp)
Copy file name to clipboardExpand all lines: defender-endpoint/microsoft-defender-core-service-overview.md
+4-4Lines changed: 4 additions & 4 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -8,7 +8,7 @@ ms.reviewer: yongrhee
8
8
ms.service: defender-endpoint
9
9
ms.subservice: ngp
10
10
ms.topic: overview
11
-
ms.date: 11/25/2024
11
+
ms.date: 06/30/2025
12
12
search.appverid: met150
13
13
ms.localizationpriority: medium
14
14
audience: ITPro
@@ -179,13 +179,13 @@ On the script page of the Run Script wizard, choose your script from the list (M
179
179
2. Use the `Set-MpPreferences -DisableCoreServiceECSIntegration` $true or $false command, where `$false` = enabled and `$true` = disabled. For example:
0 commit comments