Exposed devices in TVM recommendations

Question

All,&nbsp;is it correct that when a device is inactive and reported a recommendation, the inactive device will disappear from the list of exposed devices after&nbsp; a month (30 days)?&nbsp;best regards&nbsp;Arjan&nbsp;

askvpb · Answer

Edited: Check this link &nbsp;https://docs.microsoft.com/en-us/microsoft-365/security/defender-endpoint/fix-unhealthy-sensors?view=o365-worldwide#inactive-devices &nbsp; &nbsp;&nbsp;https://docs.microsoft.com/en-us/microsoft-365/security/defender-endpoint/offboard-machine-api?view=o365-worldwide&nbsp;&nbsp;

arjan veen, van · Answer

Hi askvpb, can you explain how the link could help me, the link is about Part 4: Submit a file for analysisbest regardsArjan

askvpb · Answer

Apologies updated the correct link.

jonhed · Answer

Arjan Veen, van&nbsp;My understanding is also that it will disappear after 30 days.There is some mention about this in the documentation as well.https://docs.microsoft.com/en-us/microsoft-365/security/defender-vulnerability-management/tvm-security-recommendation?view=o365-worldwide&nbsp;Quote below.NoteVulnerability management shows devices that were in use up to&nbsp;30 days&nbsp;ago. This is different from the rest of Microsoft Defender for Endpoint, where if a device has not been in use for more than 7 days it has in an 'Inactive' status."

Forum Discussion

Exposed devices in TVM recommendations

4 Replies

Resources