How to ensure azure DevOps pipelines agents are malware protected?

As I am using Azure Pipelines for building my project on agents managed by Microsoft. And now I want to make sure these agents are malware protected.

I assume they are already malware protected, as Microsoft manages them.

But I am looking for "Evidence" to support my assumption.

Any documentation link or some way to get evidence

Solution

Probably look at the security section for the Microsoft-hosted agents