Microsoft Detection and Response Team (DART) AMA

Hi Nate, Pretty much the same as any Linux environment: minimize unnecessary services, harden accounts, etc. I know in September of 2021 there was a Russian malware variant that used a Linux loader (compiled Python) to inject into Windows processes -- it was quickly added to Defender and is now detected.