Microsoft Security Tech Accelerator
Dec 06 2023, 07:00 AM - 12:00 PM (PST)
Microsoft Tech Community

How often does a Sensor do a SAM-R query to an endpoint?

Copper Contributor

Hi, How often does the sensors do  SAM-R queries to endpoints?

What event triggers the sensor to query the endpoint? or is it a periodic poll?

I want to understand if the imapct on performance on the endpoint is negilgible.


Many thanks.


2 Replies
best response confirmed by aaaaaaaanonymous (Copper Contributor)

The trigger is when the endpoint contacts the DC.

Current implementation ( subject to change without notice) is that it will cache the result for 1hr.
performance impact is negligible.

Thank you very much for the info Eli.