Forum Discussion

Arjan Veen, van's avatar
Arjan Veen, van
Brass Contributor
Sep 07, 2022

Exposed devices in TVM recommendations

All,

 

is it correct that when a device is inactive and reported a recommendation, the inactive device will disappear from the list of exposed devices after  a month (30 days)?

 

best regards

 

Arjan

 

4 Replies

  • Jonhed's avatar
    Jonhed
    Steel Contributor

    Arjan Veen, van 

    My understanding is also that it will disappear after 30 days.
    There is some mention about this in the documentation as well.
    https://docs.microsoft.com/en-us/microsoft-365/security/defender-vulnerability-management/tvm-security-recommendation?view=o365-worldwide

     

    Quote below.

    Note

    Vulnerability management shows devices that were in use up to 30 days ago. This is different from the rest of Microsoft Defender for Endpoint, where if a device has not been in use for more than 7 days it has in an 'Inactive' status."

  • askvpb's avatar
    askvpb
    Brass Contributor

    Edited: Check this link  https://docs.microsoft.com/en-us/microsoft-365/security/defender-endpoint/fix-unhealthy-sensors?view=o365-worldwide#inactive-deviceshttps://docs.microsoft.com/en-us/microsoft-365/security/defender-endpoint/fix-unhealthy-sensors?view=o365-worldwide#inactive-devices

     

     

    https://docs.microsoft.com/en-us/microsoft-365/security/defender-endpoint/offboard-machine-api?view=o365-worldwide

     

     

    • Arjan Veen, van's avatar
      Arjan Veen, van
      Brass Contributor
      Hi askvpb, can you explain how the link could help me, the link is about Part 4: Submit a file for analysis

      best regards

      Arjan
      • askvpb's avatar
        askvpb
        Brass Contributor
        Apologies updated the correct link.