Forum Discussion

smock88's avatar
smock88
Copper Contributor
May 18, 2023

Removable StoragePolicy Triggered AHQ

Good Afternoon,

 

I am using these two AHQ found in this doc: https://learn.microsoft.com/en-us/microsoft-365/security/defender-endpoint/device-control-removable-storage-access-control?view=o365-worldwide

 

I notice that there seems to be duplicate entries for each alert that came in. I have thousands of alerts when in reality there should only be a couple. Is there a way I can update the AHQ to remove the duplicates? Or are these other entries unique in some way?

 

 

No RepliesBe the first to reply