Query Details

Defender for Endpoint - Azure Information Protection Client

MDE AIP Client

Query

DeviceTvmSoftwareInventory
| where SoftwareName == @"microsoft_azure_information_protection"
| project DeviceId, DeviceName,SoftwareName, SoftwareVersion

About this query

Defender for Endpoint - Azure Information Protection Client

Query Information

Description

Use the below queries to find devices with Azure Information protection client installed.

References

Microsoft Defender XDR

// list all devices that have the Azure Information Protection Client installed

Explanation

This query helps to find devices that have the Azure Information Protection Client installed. It lists the Device ID, Device Name, Software Name, and Software Version for each device with the client installed.

Details

Alex Verboon profile picture

Alex Verboon

Released: April 21, 2024

Tables

DeviceTvmSoftwareInventory

Keywords

DeviceTvmSoftwareInventorySoftwareNamemicrosoft_azure_information_protectionDeviceIdDeviceNameSoftwareVersion

Operators

whereproject

Actions

GitHub