Good Afternoon,
I am using these two AHQ found in this doc: Microsoft Defender for Endpoint Device Control Removable Storage Access Control, removable storage m...
I notice that there seems to be duplicate entries for each alert that came in. I have thousands of alerts when in reality there should only be a couple. Is there a way I can update the AHQ to remove the duplicates? Or are these other entries unique in some way?