question

JeremyButler-2180 avatar image
0 Votes"
JeremyButler-2180 asked

Duplicate entries in Defender ATP

Hello,

Thanks in advance for any information on this issue.

As you can see we have duplicate entries in the Security Center showing up. In the below example, there are 4 total entries for this VM. These VMs are deployed through a pipeline. For some reason some are showing up in the workgroup, some are domain joined. The top 2 are domained and you can see the bottom 2 are not. I've purposely marked through any sensitive information but any help on this is happening is appreciated. My thought is that initially through the pipeline they are onboarded and onboarded as workgroup and when they are domained and the GPO hits them, they onboard again but I may be wrong.

120633-image.png


windows-10-security
image.png (231.9 KiB)
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

0 Answers