Event banner
Event details
What recommendations does the DART team have regarding WSL2 detection logging for malicious activity and system hardening?
- richarddavis2197
Microsoft
Hi Nate, Pretty much the same as any Linux environment: minimize unnecessary services, harden accounts, etc. I know in September of 2021 there was a Russian malware variant that used a Linux loader (compiled Python) to inject into Windows processes -- it was quickly added to Defender and is now detected.
