WSL Compatibility with True Protection

True Protection by Jag provides security coverage for Windows Subsystem for Linux (WSL) environments. Files accessed and executed within WSL distributions are monitored and scanned by the Windows host agent.

How WSL Protection Works

File System Monitoring: True Protection monitors the WSL virtual file system through the Windows kernel, scanning files as they are created, modified, or executed within WSL distributions.
Cross-Environment Detection: Threats that originate in WSL but target Windows resources are detected and blocked at the boundary.
WSL2 Support: Full support for WSL2 distributions running on the lightweight Hyper-V virtual machine, including network traffic monitoring.
Distribution Awareness: True Protection identifies which WSL distribution (Ubuntu, Debian, Fedora, etc.) is running and applies appropriate scanning rules.

Configuration

Step 1: Ensure True Protection is installed on the Windows host.
Step 2: Navigate to Settings > Compatibility > WSL.
Step 3: Enable WSL Protection.
Step 4: Select which WSL distributions to monitor (all or specific distributions).
Step 5: Configure scan exclusions for development files if needed (such as node_modules or build artifacts).

Performance Tips

For developers using WSL for heavy compilation or file operations, add build output directories to the exclusion list to avoid unnecessary scanning overhead. Navigate to Settings > Exclusions > Folder Exclusions and add paths like \\wsl$\Ubuntu\home\user\projects\build.