Microsoft Defender ATP Brings EDR Capabilities to macOS
Mac computers will now have the option to use Microsoft Defender Advanced Threat Protection’s endpoint and detection response.
Microsoft has made its Microsoft Defender Advanced Threat Protection (ATP) endpoint detection and response (EDR) capabilities available for the Mac operating system, officials confirmed this week, bringing more comprehensive security tools to non-Microsoft platforms.
Back in March, Microsoft debuted Defender ATP for Mac with new antivirus capabilities. This let enterprise customers strengthen Mac security, get Mac computers onboarded in the same portal as Windows devices, and expand dashboard visibility to include macOS-related alerts. The new EDR support announced today brings more detailed context to security detections.
Additional capabilities include a machine timeline, which contains information about process creation, network connections, and file creations. Microsoft’s advanced hunting tool lets users conduct free-form investigations using a powerful query engine and growing set of shared queries. Users can search for threats across macOS devices using up to 30 days of raw data.
Microsoft notes much of the investigation experience, including the hyperlinked exploration between monitored entities (files, processes, network connections, alerts), is the same on Mac machines as it is on Windows computers. Monitored entities can be explored on Mac devices.
This marks the latest step in Microsoft Defender ATP for Mac; Microsoft plans to continue expanding its capabilities to non-Windows platforms.
Read more details here.
Dark Reading’s Quick Hits delivers a brief synopsis and summary of the significance of breaking news events. For more information from the original source of the news item, please follow the link provided in this article. View Full Bio
More Insights
Read More HERE