How do I find the Sensor ID of an endpoint in the the Microsoft Defender console.
- Log into the MDE console.
- Select Advance hunting (Located in the left menu)
- Run the following query
DeviceInfo** Replace <Hostname> with the FQDN of the endpoint, but leave the ""
| where DeviceName == "<Hostname>"
** Note DeviceId is the Sensor ID in Red Canary.