Forum Discussion

branfarm's avatar
branfarm
Copper Contributor
Jul 08, 2021
Solved

MDE for Linux - show logged on users

I'm currently testing MDE for Linux in my environment and noticed that the 'Logged on users' section on the Device page in Defender Security Center is blank, even though I can find network logon events within the event Timeline.  Is this expected behavior, or should I be able to see the list of users who have logged into a machine on the device overview page?   Testing on CentOS 7 with the latest MDE for Linux package, mdatp-101.34.27-1.

 

Thanks in advance!

Resources