Find the Sensor ID of an Endpoint for Defender for Endpoint

Issue

How do I find the Sensor ID of an endpoint in the the Microsoft Defender XDR console.

Environment

Microsoft Defender for Endpoint

Resolution

1. Log into the Microsoft Defender XDR console.
2. Select Advanced Hunting from the left side menu
3. Run the following query:
   

   DeviceInfo
   | where DeviceName == "<Hostname>"
   

   ** Replace <Hostname> with the FQDN of the endpoint, but leave the ""

** Note: DeviceId is the reflected in Red Canary as Sensor ID.