Microsoft Entra Suite Tech Accelerator
Aug 14 2024, 07:00 AM - 09:30 AM (PDT)
Microsoft Tech Community

Different data between Advance hunting and Device page

Copper Contributor


I am using DeviceInfo schema but for the LogonUser Column, I get different info from that of Device Page, Please check below screenshot:

Data from Advanced  hunting:

Advanced hunting.png

Data from device page:

Device page.png

We can see from advanced hunting, an account starts with C has been fetched,


But from Device page==>log on users, there is no such an account, could same account shares different names in these two pages? 

In device page, there is an account named Administrator, could this be the same one that starts with C in advanced hunting? 

Looking forward to someone to help me on that, thanks in advance! 

0 Replies