Exposed devices in TVM recommendations

[Arjan Veen, van]

All,

is it correct that when a device is inactive and reported a recommendation, the inactive device will disappear from the list of exposed devices after  a month (30 days)?

best regards

Arjan

[#2]

Edited: Check this link  https://docs.microsoft.com/en-us/microsoft-365/security/defender-endpoint/fix-unhealthy-sensors?view...  

https://docs.microsoft.com/en-us/microsoft-365/security/defender-endpoint/offboard-machine-api?view=...

[#3]

Hi askvpb, can you explain how the link could help me, the link is about Part 4: Submit a file for analysis

best regards

Arjan

[#4]

Apologies updated the correct link.

[#5]

@Arjan Veen, van 

My understanding is also that it will disappear after 30 days.
There is some mention about this in the documentation as well.
https://docs.microsoft.com/en-us/microsoft-365/security/defender-vulnerability-management/tvm-securi...

Quote below.

Note

Vulnerability management shows devices that were in use up to 30 days ago. This is different from the rest of Microsoft Defender for Endpoint, where if a device has not been in use for more than 7 days it has in an 'Inactive' status."