Microsoft Entra Suite Tech Accelerator
Aug 14 2024, 07:00 AM - 09:30 AM (PDT)
Microsoft Tech Community

Defender for Endpoint - Software evidence update time

Copper Contributor

Hi everyone, 

I have a Windows Server 2012 R2 onboarded in MDE that was spotted with a vulnerability related to a software to update. The software was uninstalled from the server on Feb 23, yet the server still appears as exposed devices with the last seen set to Feb 23.

When will the server be removed from the exposed devices?

Cheers, 
Mathéo

0 Replies