Forum Discussion
Exposed devices in TVM recommendations
All, is it correct that when a device is inactive and reported a recommendation, the inactive device will disappear from the list of exposed devices after a month (30 days)? best regards ...
My understanding is also that it will disappear after 30 days.
There is some mention about this in the documentation as well.
https://docs.microsoft.com/en-us/microsoft-365/security/defender-vulnerability-management/tvm-security-recommendation?view=o365-worldwide
Quote below.
Note
Vulnerability management shows devices that were in use up to 30 days ago. This is different from the rest of Microsoft Defender for Endpoint, where if a device has not been in use for more than 7 days it has in an 'Inactive' status."