Forum Discussion

duckjibe's avatar
duckjibe
Copper Contributor
Oct 21, 2020

AATP - Duplicate and old object (computer, user ...) in ATP web console

Hi

When I search a computer the search result may return many object sometime with different icon and it's difficult to know wich one is the last one.

Old computer are also still displayed and a normal behaviour if we need to search past activity but sometime delete computers are still present  in Identy Security Posture report.

Same with Lateral Movement Path.

Could you explain the cleanup and refresh Policy Apply to collected data ?

Regards

1 Reply

  • EliOfek's avatar
    EliOfek
    Icon for Microsoft rankMicrosoft
    Oct 22, 2020

    duckjibe In this case, you want to ignore the ones with the circle half full icon.

    We are working on a feature that will delete old accounts that has not activity for a long time and are not related to an existing alert.

    Don't have exact info for you as the feature is being designed, so it might change...

    Anyway, entities that were involved in an alert are likely to never get deleted... maybe anonimized.