Forum Discussion
Exposed devices in TVM recommendations
All,
is it correct that when a device is inactive and reported a recommendation, the inactive device will disappear from the list of exposed devices after a month (30 days)?
best regards
Arjan
4 Replies
- JonhedSteel Contributor
My understanding is also that it will disappear after 30 days.
There is some mention about this in the documentation as well.
https://docs.microsoft.com/en-us/microsoft-365/security/defender-vulnerability-management/tvm-security-recommendation?view=o365-worldwideQuote below.
Note
Vulnerability management shows devices that were in use up to 30 days ago. This is different from the rest of Microsoft Defender for Endpoint, where if a device has not been in use for more than 7 days it has in an 'Inactive' status."
- askvpbBrass Contributor
Edited: Check this link https://docs.microsoft.com/en-us/microsoft-365/security/defender-endpoint/fix-unhealthy-sensors?view=o365-worldwide#inactive-deviceshttps://docs.microsoft.com/en-us/microsoft-365/security/defender-endpoint/fix-unhealthy-sensors?view=o365-worldwide#inactive-devices
https://docs.microsoft.com/en-us/microsoft-365/security/defender-endpoint/offboard-machine-api?view=o365-worldwide
- Arjan Veen, vanBrass ContributorHi askvpb, can you explain how the link could help me, the link is about Part 4: Submit a file for analysis
best regards
Arjan- askvpbBrass ContributorApologies updated the correct link.