Removable StoragePolicy Triggered AHQ

Copper Contributor

Good Afternoon,

 

I am using these two AHQ found in this doc: Microsoft Defender for Endpoint Device Control Removable Storage Access Control, removable storage m...

 

I notice that there seems to be duplicate entries for each alert that came in. I have thousands of alerts when in reality there should only be a couple. Is there a way I can update the AHQ to remove the duplicates? Or are these other entries unique in some way?

 

smock88_1-1684425589012.png

 

0 Replies