You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
- Upgraded the Bond version to 13.0.1 to address security vulnerabilities in versions 12 or lower.
59
+
60
+
- Mdatp package no longer has a dependency on SELinux packages.
61
+
62
+
- User can now query the status of supplementary event provider eBPF using the threat hunting query in DeviceTvmInfoGathering. To learn more about this query check: [Use eBPF-based sensor for Microsoft Defender for Endpoint on Linux](/defender-endpoint/linux-support-ebpf). The result of this query can return the following two values as eBPF status:
63
+
- Enabled: When eBPF is enabled as working as expected.
64
+
- Disabled: When eBPF is disabled due to one of the following reasons:
65
+
- When MDE is using auditD as a supplementary sensor
66
+
- When eBPF is not present and we fallback to Netlink as supplementary event provider
67
+
- There is no supplementary sensor present.
68
+
69
+
- Starting from 2411, the MDATP package release to Production on packages.microsoft.com will follow a gradual rollout mechanism which spans over a week. The other release rings, insiderFast and insiderSlow, are unaffected by this change.
70
+
71
+
- Stability and performance improvements.
72
+
73
+
- Critical bugs fixes around definition update flow.
0 commit comments