Microsoft defender for endpoint and other 3rd party FIM

Question

Can MDE and OsQuery service run together in a Linux VM ?

Answer 1

es, Microsoft Defender for Endpoint (MDE), and osquery can run together on a Linux virtual machine (VM). These tools are designed to perform different functions, so they can coexist and complement each other without conflict. Microsoft Defender for Endpoint is an endpoint protection platform that provides advanced threat protection and response capabilities. It supports a variety of operating systems, including Linux. Osquery, on the other hand, is an open-source tool that allows you to query various system properties and configurations using SQL-like syntax. It can be used for various purposes, such as monitoring, intrusion detection, and system analytics. Before deploying both tools on the same Linux VM, ensure that your system meets the minimum requirements for each tool and that you follow the respective installation and configuration guides. Also, be prepared to monitor the system for potential performance impacts or other issues that may arise when running multiple security tools simultaneously. https://learn.microsoft.com/en-us/microsoft-365/security/defender-endpoint/linux-install-manually?view=o365-worldwide https://osquery.readthedocs.io/en/stable/installation/install-linux/