Hello,
How do you manage to remove false positive when the device are behind a cloud proxy used by other client too?
A public IP found by RiskIQ don't always belong only to one host ?
You should edit your link and remove the Rewiew part : https://review.learn.microsoft.com/en-us/microsoft-365/security/defender-endpoint/internet-facing-devices?view=o365-worldwide&branch=siosulli-internetfacing#use-advanced-hunting
Published Apr 19, 2023
Version 1.0