Microsoft Defender for Endpoint
Endpoint protection

Linux Preferences

In brief

The Linux preferences page now links to a different ontology entry, and the Audit table label no longer includes “Preview.” The Audit description is unchanged.

What Defender admins need to know

Administrators should expect the updated documentation labeling and metadata; no action is specified.

Summaries are generated from the documentation change itself.

Documentation change

The comparison below shows only the changed extract. Use the full-page view for complete context.

Enforcement level Description
Real-time Actively monitors, detects, and remediates threats in real time.
Audit(Preview) Actively monitors and detects threats in real time without automatically remediating them.
On-demand Detects and remediates threats only during manual or scheduled scans.
Passive Doesn't provide real-time threat detection. Threats can still be detected during manual or scheduled scans.