https://github.com/juju4/ansible-mde

Setup Microsoft Defender for Endpoint
https://github.com/juju4/ansible-mde

Last synced: 27 days ago
JSON representation

Setup Microsoft Defender for Endpoint

• Host: GitHub
• URL: https://github.com/juju4/ansible-mde
• Owner: juju4
• License: bsd-2-clause
• Created: 2022-10-15T23:30:11.000Z (over 2 years ago)
• Default Branch: main
• Last Pushed: 2024-11-23T21:46:02.000Z (2 months ago)
• Last Synced: 2024-11-23T22:26:01.911Z (2 months ago)
• Language: Jinja
• Size: 73.2 KB
• Stars: 2
• Watchers: 2
• Forks: 2
• Open Issues: 0
• Metadata Files:
  • Readme: README.md
  • License: LICENSE

Awesome Lists containing this project

README

        
[![Actions Status - Master](https://github.com/juju4/ansible-mde/workflows/AnsibleCI/badge.svg)](https://github.com/juju4/ansible-mde/actions?query=branch%3Amaster)

[![Actions Status - Devel](https://github.com/juju4/ansible-mde/workflows/AnsibleCI/badge.svg?branch=devel)](https://github.com/juju4/ansible-mde/actions?query=branch%3Adevel)

# mde ansible role

Setup Microsoft Defender for Endpoint

* https://learn.microsoft.com/en-us/microsoft-365/security/defender-endpoint/microsoft-defender-endpoint-linux?view=o365-worldwide

* https://learn.microsoft.com/en-us/microsoft-365/security/defender-endpoint/linux-preferences?view=o365-worldwide

* https://github.com/juju4/mde-baseline-ansible

* https://github.com/juju4/mde-baseline (inspec)

## Requirements & Dependencies

### Ansible

It was tested on the following versions:

 * 2.13

### Operating systems

Tested on Ubuntu 20.04, 22.04.

## Example Playbook

Just include this role in your list.

For example

```

- host: myhost

  roles:

    - juju4.mde

```

you probably want to review variables

## Variables

TBD

## Continuous integration

```

$ pip install molecule docker

$ molecule test

$ MOLECULE_DISTRO=ubuntu:20.04 molecule test --destroy=never

```

## Troubleshooting & Known issues

* MDE can cause performance issues. Most often it is related to auditd and an appropriate process exclusion will help.

## License

BSD 2-clause