In order to assist you it would be useful to have some additional details about your Discovery deployment. Do you run log collector? WD-ATP Cloud Discovery integration? In case you're using log collector, what data source do you use?
If possible, please PM me with your tenant details, so I can also explore any relevant telemetry.