Elastic Defend requirements

[preview] This functionality is in technical preview and may be changed or removed in a future release. Elastic will work to fix any issues, but features in technical preview are not subject to the support SLA of official GA features.

To properly deploy Elastic Defend without a Mobile Device Management (MDM) profile, you must manually enable additional permissions on the host before Elastic Endpoint—the installed component that performs Elastic Defend’s threat monitoring and prevention—is fully functional. For more information, refer to the instructions for your macOS version: