Forum Discussion

Diego-Gonzalez's avatar
Jul 10, 2023
Solved

Search Agentless machines console defender for endpoint via script

How to search for machines in defender for endpoint that are without the agent installed.
  • mrl's avatar
    Jul 11, 2023
    Go to security.microsoft.com --> under Assets --> Devices. On top of that page you will find the number of devices that are not onboarded (can e.g. be identified if present in the same network as onboarded devices which can "see" the not onboarded devices).
    You can filter for devices not onboarded by opening the filter pane on the right --> under onboarding status select the ones you're looking for.
    If you want to see how a device not onboared was identified, click on the device name --> on the left under "device details" look for "recently seen by".

    hope that helps.

Resources