What is Azure Security Linux Agent?

Question

As per title. Does anyone know What is Azure Security Linux Agent and its role beyond what's stated in the policy file: "Configure supported Linux Arc machines to automatically install the Azure Security agent. Security Center collects events from the agent and uses them to provide security alerts and tailored hardening tasks (recommendations). Target Linux Arc machines must be in a supported location"

To explain in more detail. In Azure Arc, I already have an MDE extension which should already provide security alerts and recommendations via Defender for Cloud.

Is it a legacy agent? There is very little information you can find about this extension with completely 0 guides about uninstalling/installing manually.

Answer 1

The Azure Security Linux Agent is a newer version of the Linux analytics agent for Azure Security Center, designed to improve the onboarding of Linux VMs and servers to the Security Center.

The Azure Security Linux Agent is part of the Azure virtual machine (VM) extensions, which are small applications that provide post-deployment configuration and automation tasks on Azure VMs. These extensions are installed and managed by the Azure control plane. The Azure Linux Agent is responsible for processing the platform extension commands and ensuring the correct state of the extension inside the VM