Security News > 2022 > August > Microsoft makes tamper protection for macOS endpoints widely available

The tamper protection feature in Microsoft Defender for Endpoint for macOS is getting rolled out to all customers, the company has announced on Monday.

"While in Audit mode, TP signals can be viewed via Advanced Hunting and in local on-device logs. No tampering alerts are raised in the Security Center while in Audit mode. Alerts are raised in the portal only in block mode," explained Camilla Sophie Djamalov, a Program Manager Intern at Microsoft.

Enabling tamper protection on Microsoft Defender for Endpoint on macOS devices.

Microsoft Defender for Endpoint is an enterprise endpoint security platform aimed at preventing, detecting, investigating, and responding to advanced threats targeting enterprise networks.

The tamper protection on macOS is supported for macOS Monterey, Big Sur, and Catalina, and the minimum required version for Defender for Endpoint is v101.70.19.

Microsoft also advises enabling System Integrity Protection and using a Mobile device management tool such as Microsoft Endpoint Manager or JAMF Pro to configure Microsoft Defender for Endpoint on macOS devices.

News URL

https://www.helpnetsecurity.com/2022/08/17/microsoft-tamper-protection-macos/