<!-- WP QUADS Content Ad Plugin v. 2.0.92 -->
<div class="quads-location quads-ad2522 " id="quads-ad2522" style="float:none;margin:0px 3px 3px 3px;padding:0px 0px 0px 0px;" data-lazydelay="0">

</div>
<h2>Installing Microsoft Azure Threat Protection (ATP) on Linux Devices</h2>
<p>While playing with ATP on some windows devices, I was in the mood of trying the new Deepin 20 desktop flavor which is a famous Chinese Linux OS based system. </p>
<!-- WP QUADS Content Ad Plugin v. 2.0.92 -->
<div class="quads-location quads-ad2531 " id="quads-ad2531" style="float:none;margin:0px 3px 3px 3px;padding:0px 0px 0px 0px;" data-lazydelay="0">

</div>

<!-- WP QUADS Content Ad Plugin v. 2.0.92 -->
<div class="quads-location quads-ad2523 " id="quads-ad2523" style="float:none;margin:0px 3px 3px 3px;padding:0px 0px 0px 0px;" data-lazydelay="0">

</div>

<!-- WP QUADS Content Ad Plugin v. 2.0.92 -->
<div class="quads-location quads-ad2530 " id="quads-ad2530" style="float:none;margin:0px 3px 3px 3px;padding:0px 0px 0px 0px;" data-lazydelay="0">

</div>

<p>Microsoft doesn’t indicate anywhere that installation of ATP on a Linux client is possible but Linux server is mentioned in the official ATP installation documents.</p>
<h2>How to Install?</h2>
<p>After I installed the Deepin OS, I was really impressed by the new beautiful Linux design so I plan to use it and have it secure with ATP. </p>
<p><a href="https://www.moh10ly.com/wp-content/uploads/2020/05/image.png"><img width="1028" height="527" title="image" style="margin: 0px; display: inline; background-image: none;" alt="image" src="https://www.moh10ly.com/wp-content/uploads/2020/05/image_thumb.png" border="0"></a> 

<!-- WP QUADS Content Ad Plugin v. 2.0.92 -->
<div class="quads-location quads-ad2528 " id="quads-ad2528" style="float:none;margin:0px 3px 3px 3px;padding:0px 0px 0px 0px;" data-lazydelay="0">

</div>
 
</p>
<h2>Prerequisites:</h2>
<ol>
<li>Configure the Linux software repository for Ubuntu and Debian</li>
<li>Application Installation</li>
<li>Download the onboarding Package</li>
<li>Client Config</li>
</ol>
<h3>1-Configure the Linux software repository for Ubuntu and Debian</h3>
<p>You will need to install the required libraries, install Gpg, apt-transport-https and update repository metadata using the following commands one by one.</p>
<ul>
<li>sudo apt-get install curl</li>
</ul>
<p><a href="https://www.moh10ly.com/wp-content/uploads/2020/05/image-1.png"><img width="960" height="497" title="image" style="margin: 0px; display: inline; background-image: none;" alt="image" src="https://www.moh10ly.com/wp-content/uploads/2020/05/image_thumb-1.png" border="0"></a></p>
<ul>
<li>sudo apt-get install libplist-utils</li>
</ul>
<p><a href="https://www.moh10ly.com/wp-content/uploads/2020/05/image-2.png"><img width="1028" height="311" title="image" style="margin: 0px; display: inline; background-image: none;" alt="image" src="https://www.moh10ly.com/wp-content/uploads/2020/05/image_thumb-2.png" border="0"></a></p>
<ul>
<li>curl -o microsoft.list <a href="https://packages.microsoft.com/config/ubuntu/18.04/insiders-fast.list">https://packages.microsoft.com/config/ubuntu/18.04/insiders-fast.list</a></li>
</ul>
<p><a href="https://www.moh10ly.com/wp-content/uploads/2020/05/image-3.png"><img width="1028" height="73" title="image" style="margin: 0px; display: inline; background-image: none;" alt="image" src="https://www.moh10ly.com/wp-content/uploads/2020/05/image_thumb-3.png" border="0"></a></p>
<ul>
<li>sudo mv ./microsoft.list /etc/apt/sources.list.d/microsoft-ubuntu.list
</li>
<li>sudo apt-get install gpg</li>
</ul>
<p><a href="https://www.moh10ly.com/wp-content/uploads/2020/05/image-4.png"><img width="1028" height="128" title="image" style="margin: 0px; display: inline; background-image: none;" alt="image" src="https://www.moh10ly.com/wp-content/uploads/2020/05/image_thumb-4.png" border="0"></a>
</p>
<ul>
<li>curl <a href="https://packages.microsoft.com/keys/microsoft.asc">https://packages.microsoft.com/keys/microsoft.asc</a> | sudo apt-key add &#8211;</li>
<li>sudo apt-get install apt-transport-https
</li>
<li>sudo apt-get update
</li>
</ul>
<p><a href="https://www.moh10ly.com/wp-content/uploads/2020/05/image-5.png"><img width="1028" height="670" title="image" style="margin: 0px; display: inline; background-image: none;" alt="image" src="https://www.moh10ly.com/wp-content/uploads/2020/05/image_thumb-5.png" border="0"></a></p>
<p><a href="https://www.moh10ly.com/wp-content/uploads/2020/05/image-6.png"><img width="907" height="262" title="image" style="margin: 0px; display: inline; background-image: none;" alt="image" src="https://www.moh10ly.com/wp-content/uploads/2020/05/image_thumb-6.png" border="0"></a></p>
<p>After successfully installing all the libraries, I will go ahead and install the application </p>
<h3>2- Application Installation</h3>
<p>From the Linux client Terminal using sudo power user run the following script</p>
<p>sudo apt-get install mdatp</p>
<p><a href="https://www.moh10ly.com/wp-content/uploads/2020/05/image-7.png"><img width="1028" height="716" title="image" style="margin: 0px; display: inline; background-image: none;" alt="image" src="https://www.moh10ly.com/wp-content/uploads/2020/05/image_thumb-7.png" border="0"></a></p>
<p>Once finished, You can go back to the ATP portal and download the Linux Onboarding package on the linux server/client you want to onboard </p>
<h3>3- Download the onboarding Package</h3>
<p>Since I am doing a single deployment not bulk, then I will go to the Microsoft Defender Security Center’s setting page and download the Linux package from the device management section.</p>
<p><a href="https://www.moh10ly.com/wp-content/uploads/2020/05/image-8.png"><img width="922" height="772" title="image" style="margin: 0px; display: inline; background-image: none;" alt="image" src="https://www.moh10ly.com/wp-content/uploads/2020/05/image_thumb-8.png" border="0"></a></p>
<p>The steps for the onboarding is already mentioned on that page so after you download the script you’ll know exactly what to do next.</p>
<p>The file is 9kb python in size </p>
<p><a href="https://www.moh10ly.com/wp-content/uploads/2020/05/image-9.png"><img width="809" height="154" title="image" style="margin: 0px; display: inline; background-image: none;" alt="image" src="https://www.moh10ly.com/wp-content/uploads/2020/05/image_thumb-9.png" border="0"></a></p>
<p>Copy the file to your Linux Desktop</p>
<p><a href="https://www.moh10ly.com/wp-content/uploads/2020/05/image-10.png"><img width="705" height="379" title="image" style="display: inline; background-image: none;" alt="image" src="https://www.moh10ly.com/wp-content/uploads/2020/05/image_thumb-10.png" border="0"></a></p>
<h3>4- Client Config</h3>
<p>From the terminal type in chmod a+x MicrosoftDefenderATPOnBoardingLinuxServer.py and hit enter </p>
<p>Note: python must be installed on this linux dervice.</p>
<!-- WP QUADS Content Ad Plugin v. 2.0.92 -->
<div class="quads-location quads-ad2525 " id="quads-ad2525" style="float:none;margin:0px 3px 3px 3px;padding:0px 0px 0px 0px;" data-lazydelay="0">

</div>

<p>Then type python /MicrosoftDefenderATPOnBoardingLinuxServer.py</p>
<p><a href="https://www.moh10ly.com/wp-content/uploads/2020/05/image-11.png"><img width="816" height="93" title="image" style="margin: 0px; display: inline; background-image: none;" alt="image" src="https://www.moh10ly.com/wp-content/uploads/2020/05/image_thumb-11.png" border="0"></a></p>
<p>This will run pretty quick and will assign your Linux server/client with your Organization ID.</p>
<h3>To see the Organization ID type:</h3>
<p>mdatp –health orgId</p>
<p><a href="https://www.moh10ly.com/wp-content/uploads/2020/05/image-12.png"><img width="491" height="67" title="image" style="margin: 0px; display: inline; background-image: none;" alt="image" src="https://www.moh10ly.com/wp-content/uploads/2020/05/image_thumb-12.png" border="0"></a></p>
<p>Few minutes later you’ll be able to see the installation completion and the status through this command</p>
<h3>Check if WDATP is functioning as expected </h3>
<p>mdatp –health healthy</p>
<p><a href="https://www.moh10ly.com/wp-content/uploads/2020/05/image-13.png"><img width="510" height="67" title="image" style="margin: 0px; display: inline; background-image: none;" alt="image" src="https://www.moh10ly.com/wp-content/uploads/2020/05/image_thumb-13.png" border="0"></a></p>
<h3>Check if WDATP agent is enabled </h3>
<p>mdatp &#8211;health realTimeProtectionEnabled</p>
<p><a href="https://www.moh10ly.com/wp-content/uploads/2020/05/image-14.png"><img width="583" height="86" title="image" style="margin: 0px; display: inline; background-image: none;" alt="image" src="https://www.moh10ly.com/wp-content/uploads/2020/05/image_thumb-14.png" border="0"></a></p>
<p>Let’s check on our ATP portal and see if the machine is showing there.</p>
<p>Note: It might take 5-15 mins to update the definitions of WDATP when onboarding. </p>
<p><a href="https://www.moh10ly.com/wp-content/uploads/2020/05/image-15.png"><img width="1028" height="573" title="image" style="margin: 0px; display: inline; background-image: none;" alt="image" src="https://www.moh10ly.com/wp-content/uploads/2020/05/image_thumb-15.png" border="0"></a></p>
<h3>Running a detection Test: </h3>
<p>curl -o ~/Downloads/eicar.com.txt <a href="https://www.eicar.org/download/eicar.com.txt">https://www.eicar.org/download/eicar.com.txt</a></p>
<p><a href="https://www.moh10ly.com/wp-content/uploads/2020/05/image-16.png"><img width="1028" height="219" title="image" style="margin: 0px; display: inline; background-image: none;" alt="image" src="https://www.moh10ly.com/wp-content/uploads/2020/05/image_thumb-16.png" border="0"></a></p>
<p></p>
<p>In few seconds the file has disappeared</p>
<p><a href="https://www.moh10ly.com/wp-content/uploads/2020/05/image-17.png"><img width="1028" height="242" title="image" style="margin: 0px; display: inline; background-image: none;" alt="image" src="https://www.moh10ly.com/wp-content/uploads/2020/05/image_thumb-17.png" border="0"></a></p>
<p></p>
<h3>Checking for threats </h3>
<p>mdatp &#8211;threat &#8211;list –pretty</p>
<p><a href="https://www.moh10ly.com/wp-content/uploads/2020/05/image-18.png"><img width="535" height="244" title="image" style="display: inline; background-image: none;" alt="image" src="https://www.moh10ly.com/wp-content/uploads/2020/05/image_thumb-18.png" border="0"></a></p>
<h2></h2>
<p>Let’s see this on the ATP Portal</p>
<p><a href="https://www.moh10ly.com/wp-content/uploads/2020/05/image-19.png"><img width="1028" height="413" title="image" style="margin: 0px; display: inline; background-image: none;" alt="image" src="https://www.moh10ly.com/wp-content/uploads/2020/05/image_thumb-19.png" border="0"></a></p>
<h2><a href="https://www.moh10ly.com/wp-content/uploads/2020/05/image-20.png"><img width="608" height="772" title="image" style="margin: 0px; display: inline; background-image: none;" alt="image" src="https://www.moh10ly.com/wp-content/uploads/2020/05/image_thumb-20.png" border="0"></a></h2>
<p></p>
<p>This is just a test malware not a real one therefore it wont harm your machine at all. </p>
<p>Hope this helps you with your deployments </p>
<h2>Ref:</h2>
<p><a href="https://docs.microsoft.com/en-us/windows/security/threat-protection/microsoft-defender-atp/linux-install-manually">https://docs.microsoft.com/en-us/windows/security/threat-protection/microsoft-defender-atp/linux-install-manually</a></p>
<!-- WP QUADS Content Ad Plugin v. 2.0.92 -->
<div class="quads-location quads-ad2527 " id="quads-ad2527" style="float:none;margin:0px 3px 3px 3px;padding:0px 0px 0px 0px;" data-lazydelay="0">

</div>

<h2>Deepin 20 Beta version</h2>
<p><a href="https://www.deepin.org/en/2020/04/15/deepin-20-beta/">https://www.deepin.org/en/2020/04/15/deepin-20-beta/</a></p>

<!-- WP QUADS Content Ad Plugin v. 2.0.92 -->
<div class="quads-location quads-ad2524 " id="quads-ad2524" style="float:none;margin:0px 3px 3px 3px;padding:0px 0px 0px 0px;" data-lazydelay="0">

</div>


Reset and manage your Active Directory users' Passwords Active Directory is one of the most…
Finding Exchange Database hidden mailboxes. Story:Maybe you have been in this situation before, trying to…
If you're using a Proxy server in your firewall or in your network and have…
Story:I got some clients that have reported some of their users being locked out and…
Delegate Permissions This is a code that I have wrote recently to check if an…
Story: I got a request from a client who constantly gets CVs and have to…