Microsoft Upgrades Defender to Lock Down Linux Gear for its Own Good

The device isolation capability is in public preview and mirrors what the product already does for Windows systems.

"Some attack scenarios may require you to isolate a device from the network," Microsoft wrote in a blog post. "This action can help prevent the attacker from controlling the compromised device and performing further activities such as data exfiltration and lateral movement. Just like in Windows devices, this device isolation feature."

Intruders won't be able to connect to the device or run operations like assuming unauthorized control of the system or stealing sensitive data, Microsoft claims.