Microsoft has announced the public preview of endpoint detection and response (EDR) capabilities on Linux servers running Microsoft Defender Advanced Threat Protection (ATP) Microsoft Defender for Endpoint was made generally available for enterprise customers with Linux devices earlier this year, in June. EDR capabilities are available on Linux Server distributions supporting RHEL 7.2+. RHEL, Ubuntu 16 LTS or higher LTS, SLES 12+. Debian 9+ and Oracle Linux 7. 2.2.99 are supported.
Source: https://www.bleepingcomputer.com/news/microsoft/microsoft-previews-linux-endpoint-detection-and-response-capabilities/