EDR solution should be installed on Virtual Machines

Hi Mahavir Saroj

I'm wondering whether EDR and Microsoft defender for endpoint is same or different.

Microsoft Defender for Endpoint (MDE) and EDR (Endpoint Detection and Response) are the same thing. Microsoft Defender for Endpoint includes EDR capabilities, as well as other security features such as antivirus, firewall, and device control.

Unsupported Defender for Cloud plan for agentless scanning under not applicable resources.

Also, agentless scanning is included in the Cloud Security Posture Management (CSPM) and Defender for Servers P2 plan. So, if you have either of these plans, then only you can enable agentless scanning for your Azure virtual machines

How to resolve EDR solution should be installed on Virtual Machines recommendations

EDR solution should be installed on Virtual Machines recommendation offers multiple recommended actions to resolve on each attached machine:

• Enable Microsoft Defender for Endpoint integration. Alternatively, you can remediate this recommendation by installing any of the supported endpoint detection and response solution on your virtual machine which is already enabled for you.
• Upgrade Defender plan - when defender for Servers plan 2 isn't enabled on the VM.

Reference - https://github.com/MicrosoftDocs/azure-docs/blob/main/articles/defender-for-cloud/endpoint-detection-response.md#supported-solutions-and-platforms

Thanks,

Shweta

Please remember to "Accept Answer" if answer helped you.