You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/defender-for-cloud/anti-malware.md
+9-9Lines changed: 9 additions & 9 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -1,24 +1,24 @@
1
1
---
2
-
title: Antimalware detection and prevention
3
-
description: Learn how to configure Container runtime antimalware Detection and Prevention to block or alert on malware in Azure, AWS, and GCP environments.
2
+
title: Antimalware detection and blocking
3
+
description: Learn how to configure Container runtime Antimalware detection and blocking to block or alert on malware in Azure, AWS, and GCP environments.
4
4
#customer intent: As a security admin, I want to configure container runtime antimalware policies so that I can detect and prevent malware in my containerized workloads.
5
5
author: ElazarK
6
6
ms.author: elkrieger
7
7
ms.date: 02/16/2026
8
8
ms.topic: how-to
9
9
---
10
10
11
-
# Antimalware detection and prevention
11
+
# Antimalware detection and blocking
12
12
13
-
Container runtime antimalware detection and prevention happens when a container runs an executable that the system identifies as malware.
13
+
Container runtime antimalware detection and blocking happens when a container runs an executable that the system identifies as malware.
14
14
15
15
This feature provides alerts when it identifies malware and allows you to block it. You can define antimalware policies to specify conditions for generating alerts and blocking, helping you distinguish between legitimate activities and potential threats.
16
16
17
-
Container runtime antimalware detection and prevention is integrated into the Defender for Containers plan and is available for the Azure (AKS), Amazon (EKS), and Google (GKE) clouds.
17
+
Container runtime antimalware detection and blocking is integrated into the Defender for Containers plan and is available for the Azure (AKS), Amazon (EKS), and Google (GKE) clouds.
18
18
19
19
## Prerequisites
20
20
21
-
- To use container runtime antimalware detection and prevention, you need to run the Defender for Container sensor, which is available for the AWS, GCP, and AKS clouds. Currently, this feature is in preview and is only supported for:
21
+
- To use container runtime antimalware detection and blocking, you need to run the Defender for Container sensor, which is available for the AWS, GCP, and AKS clouds. Currently, this feature is in preview and is only supported for:
22
22
-**AKS**: Helm provisioning with sensor version **0.10.2**.
23
23
-**Multicloud**: Helm provisioning with sensor version **0.10.2** or the ARC extension using `release train=preview`.
24
24
@@ -33,19 +33,19 @@ Container runtime antimalware detection and prevention is integrated into the De
33
33
| CPU | 50m | 300m |
34
34
| Memory | 128Mi | 500Mi |
35
35
36
-
- Learn more about [antimalware detection and prevention availability](support-matrix-defender-for-containers.md#runtime-protection-features).
36
+
- Learn more about [antimalware detection and blocking availability](support-matrix-defender-for-containers.md#runtime-protection-features).
37
37
38
38
### Components
39
39
40
-
The following components are part of antimalware detection and prevention:
40
+
The following components are part of antimalware detection and blocking:
41
41
42
42
- An enhanced sensor that detects and prevents malware.
43
43
44
44
- Antimalware policy configuration options.
45
45
46
46
- Antimalware alerts.
47
47
48
-
## Enable antimalware detection and prevention
48
+
## Enable antimalware detection and blocking
49
49
50
50
Antimalware isn't enabled by default because it consumes extra cluster resources.
Copy file name to clipboardExpand all lines: articles/defender-for-cloud/release-notes.md
+4-4Lines changed: 4 additions & 4 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -31,21 +31,21 @@ This article summarizes what's new in Microsoft Defender for Cloud. It includes
31
31
32
32
| Date | Category | Update |
33
33
| -------- | -------- | -------- |
34
-
| February 20, 2026 | Preview |[Container runtime antimalware detection and prevention (Preview)](#container-runtime-antimalware-detection-and-prevention-preview)|
34
+
| February 20, 2026 | Preview |[Container runtime antimalware detection and blocking (Preview)](#container-runtime-antimalware-detection-and-blocking-preview)|
35
35
| February 10, 2026| Preview |[Database-level recommendations experience for SQL Vulnerability Assessment findings (Preview)](#database-level-recommendations-experience-for-sql-vulnerability-assessment-preview)|
36
36
| February 10, 2026| GA |[Scanning support for Minimus and Photon OS container images](#scanning-support-for-minimus-and-photon-os-container-images)|
37
37
| February 9, 2026| GA |[Simulate alerts for SQL servers on machines](#simulate-alerts-for-sql-servers-on-machines)|
38
38
| February 3, 2026| Preview |[Threat protection for AI agents (Preview)](#threat-protection-for-ai-agentspreview)|
39
39
|February 2, 2026| GA |[Updated CIEM recommendation logic](#updated-ciem-recommendation-logic)|
40
40
|February 2, 2026| Preview |[Threat protection for AI agents (Preview)](#threat-protection-for-ai-agentspreview)|
41
41
42
-
### Container runtime antimalware detection and prevention (Preview)
42
+
### Container runtime antimalware detection and blocking (Preview)
43
43
44
44
February 20, 2026
45
45
46
-
Microsoft Defender for Cloud is announcing container runtime anti-malware detection and prevention in preview. This new feature provides real-time detection and prevention of malware in containerized workloads across Azure Kubernetes Service (AKS), Amazon Elastic Kubernetes Service (EKS), and Google Kubernetes Engine (GKE) environments. With this release, you can create anti-malware rules to define conditions for generating alerts and blocking malware, helping you protect your clusters from threats while minimizing false positives.
46
+
Microsoft Defender for Cloud is announcing container runtime anti-malware detection and prevention in preview. This feature provides real-time detection and prevention of malware in containerized workloads across Azure Kubernetes Service (AKS), Amazon Elastic Kubernetes Service (EKS), and Google Kubernetes Engine (GKE) environments. With this release, you can create anti-malware rules to define conditions for generating alerts and blocking malware, helping you protect your clusters from threats while minimizing false positives.
47
47
48
-
Learn more about [antimalware detection and prevention](anti-malware.md).
48
+
Learn more about [antimalware detection and blocking](anti-malware.md).
49
49
50
50
### Database-level recommendations experience for SQL Vulnerability Assessment (Preview)
0 commit comments