Forum Discussion
Finding DC's using KQL in and defender fro endpoitns
Hi This is probably a dumb question but is there a foolproof way to use the telemetry provided by DME to identify DC's? I'm often in a position where we were not involved in the MDE rollout and need...
PeterJInobits
MDE by itself can't identify or automatically tag a server by the service it is running (like DC, exchange, sql, etc.)
After onboarding a server, you would need to manually tag a server in the MDE portal.
MDE by itself can't identify or automatically tag a server by the service it is running (like DC, exchange, sql, etc.)
After onboarding a server, you would need to manually tag a server in the MDE portal.
