Edit

Share via

DeviceBaselineComplianceAssessment (Preview)

  • Article

Applies to:

  • Microsoft Defender XDR
  • Microsoft Defender for Endpoint

Important

Some information relates to prereleased product which may be substantially modified before it's commercially released. Microsoft makes no warranties, express or implied, with respect to the information provided here.

The DeviceBaselineComplianceAssessment table in the advanced hunting schema contains baseline compliance assessment snapshot, which indicates the status of various security configurations related to baseline profiles on devices.

For information on other tables in the advanced hunting schema, see the advanced hunting reference.

Column name Data type Description
DeviceId string Unique identifier for the device in the service
DeviceName string Fully qualified domain name (FQDN) of the device
OSPlatform string Platform of the operating system running on the device. This indicates specific operating systems, including variations within the same family, such as Windows 11, Windows 10 and Windows 7.
OSVersion string Version of the operating system running on the device
ConfigurationId string Unique identifier for a specific configuration
ProfileId string Unique identifier for the profile
IsCompliant boolean Indicates whether the device that initiated the event is compliant or not
IsApplicable boolean Indicates whether the configuration or policy is applicable
Source dynamic The registry path or other location used to determine the current device setting
RecommendedValue dynamic Set of expected values for the current device setting to be compliant
CurrentValue dynamic Set of detected values found on the device
IsExempt boolean Indicates whether the device is exempt from having the baseline configuration

Tip

Do you want to learn more? Engage with the Microsoft Security community in our Tech Community: Microsoft Defender XDR Tech Community.