Arthur T Knackerbracket has found the following story:
Hey, Linux fans! Microsoft has got your back over fileless threats. Assuming you've bought into the whole Azure Security Center thing.
Hot on the heels of a similar release for Windows (if by "hot" you mean "nearly 18 months after") comes a preview aimed at detecting that breed of malware that inserts itself into memory before attempting to hide its tracks.
[...] Microsoft's detection feature scans the memory of all processes for the tell-tale footprint of a fileless toolkit, shrieking a warning in the Azure Security Center along with some details of the nasty. An admin can then decide what action to take (and what further investigation is needed).
The scan, according to the Windows giant, is not invasive and the "vast majority" take less than five seconds to run. More importantly for the those fearful of slurpage, memory analysis is performed on the host itself and the results only contain "security-relevant metadata and details of suspicious payloads".
(Score: 2) by Barenflimski on Wednesday February 26 2020, @05:26PM (3 children)
I like to keep my *nix and Windows separated and segregated. I do the same with my sheep when they are sick. Last thing I want are my *nix boxes becoming infected with Microsoft crap.
(Score: 2) by DannyB on Wednesday February 26 2020, @07:34PM (1 child)
I like to keep my sheep and systemd users segregated. Because: reasons.
To transfer files: right-click on file, pick Copy. Unplug mouse, plug mouse into other computer. Right-click, paste.
(Score: 0) by Anonymous Coward on Wednesday February 26 2020, @09:27PM
I find the coats to be of significantly different consistency and quality. And the systemd users keep screaming when I use the sheep shears on them. And the sheep get nervous when they see the systemd users eyeing them.
(Score: 3, Informative) by Grishnakh on Thursday February 27 2020, @03:10AM
You don't need to do that. If your sheep are sick, they aren't going to get your chickens sick, because pretty much no virus can cross species (genuses? families?) like that. It's the same with Windows and Linux; you don't have to worry about any Windows crap infecting Linux. (However, it is possible that Microsoft the company could engineer something specifically to target Linux... but you segregating Windows from it won't affect this.)