Jul 08 2021 02:12 PM
I'm currently testing MDE for Linux in my environment and noticed that the 'Logged on users' section on the Device page in Defender Security Center is blank, even though I can find network logon events within the event Timeline. Is this expected behavior, or should I be able to see the list of users who have logged into a machine on the device overview page? Testing on CentOS 7 with the latest MDE for Linux package, mdatp-101.34.27-1.
Thanks in advance!
Jul 14 2021 09:17 AM
Solution
Logged on user is not yet available for Linux.
For more information on what's new in MDE for Linux, please see: What's new in Microsoft Defender for Endpoint on Linux | Microsoft Docs
Jul 14 2021 09:17 AM
Solution
Logged on user is not yet available for Linux.
For more information on what's new in MDE for Linux, please see: What's new in Microsoft Defender for Endpoint on Linux | Microsoft Docs