AMA: Troubleshoot device issues with Intune

We are finding machine records in Intune disappear. We dont use device cleanup rules and it doesn't seem to matter windows or mac. When this happens the machine gets conditional access blocked for compliance. We need to delete azure record and enroll in Intune again. I believe this is happening due to the defender for endpoint integration and trying to reenroll devices? Intune logs do not show any person delete the record. Where can I find logs to help troubleshoot?