DeviceInfo
DeviceInfo contains device inventory and state information, including operating system, onboarding, sensor health, and logged-on user details.
tablesCurrent
Relationships
Microsoft Defender for Endpoint
Source productproductMicrosoft Defender for Endpoint P2
Required licenselicenseMicrosoft Graph Security API
API accessapiMicrosoft Defender for Endpoint APIs
API accessapiLegacy Microsoft Defender XDR APIs
API accessapiDeviceEvents
Related tabletableDeviceNetworkEvents
Related tabletableDeviceLogonEvents
Related tabletable
Source productproductMicrosoft Defender for Endpoint P2
Required licenselicenseMicrosoft Graph Security API
API accessapiMicrosoft Defender for Endpoint APIs
API accessapiLegacy Microsoft Defender XDR APIs
API accessapiDeviceEvents
Related tabletableDeviceNetworkEvents
Related tabletableDeviceLogonEvents
Related tabletable
Schema
| Field | Type | Description | Copy |
|---|---|---|---|
Timestamp | datetime | Last date and time recorded for the device. | |
DeviceId | string | Unique identifier for the device in the service. | |
DeviceName | string | Fully qualified domain name of the device. | |
ClientVersion | string | Version of the endpoint agent or sensor running on the device. | |
PublicIP | string | Public IP address used by the onboarded device to connect to Microsoft Defender for Endpoint. | |
OSPlatform | string | Platform of the operating system running on the device. | |
OSBuild | long | Build version of the operating system running on the device. | |
LoggedOnUsers | string | List of users logged on to the device at the time of the event. | |
OnboardingStatus | string | Indicates whether the device is currently onboarded to Microsoft Defender for Endpoint. | |
SensorHealthState | string | Health state of the device EDR sensor, if onboarded. |