Guidance for running Elastic Defend on ECE hosts

Hello,

Is it supported to run Elastic Agent with the Defend integration (ofc first in detect mode initially) on ECE hosts? Should we configure Trusted Applications? If so, which ones?

Best regards,

Willem