Hello LinkedIn Community, With the continuation of making sure your Defender for Endpoint is up to date, and you have your deployment rings, I figured it would be nice to get that reported for us. I had a device inventory report before but I just added the deployment rings to the report. The report provides AvModeStatus, Version, Update times, Rings. Query and screenshot below are examples from my lab. Link to KQL: https://lnkd.in/eaR9exGN Search for KQL, this one is under MDE.
Forking Matt
Good to know!
FastTrack M365 Defender SME
3moAs I went through the day, Defender deployment rings came up multiple times in internal DLs and chats about our update rings for Defender. Here is a link that will hopefully help walk through that process: https://aka.ms/MDEUpdateRings