All Detections

Can Be Onboarded Devices

Azure Sentinel@AzureSentinel
updated Jun 17, 20253012

This query surfaces devices that were discovered by Microsoft Defender for Endpoint and can be onboarded

Microsoft Sentinel (KQL)