Azure sentinel or security center hardware device identification RRS feed

  • Question

  • So we have multiple security tools, and alot of times we are scanning or reporting the same server/workstation, but we never know this. So it looks like we have more computers and devices than we actually have in our environment.

    How can you use azure security center (or sentinel) to verify that you may be scanning the same server with the different tools we are using?

    doing a quick search, we noticed one way of doing this is using the machine guid. Not sure if this is common practice, or if there is a better way...

    Thursday, April 25, 2019 11:56 PM

All replies

  • It should show you the name of the server/workstation and should not report twice. Where are you looking in Security Center and Sentinel?

    Can you specify which tools you are using and what types of reports you are looking at that are showing the same servers? Is it also possible that you have workstations belonging to several domains? 

    Wednesday, May 1, 2019 11:53 PM
  • Please check the above suggestions.
    Monday, May 20, 2019 11:59 PM