Hello!

This may be a really stupid question. We have a device which keeps popping up in the Defender portal as having hack tools installed.

We believe this belonged to an old consultant and somehow this got installed on their device a long time ago (it has no access to 365 and is not compliant but installed via intune I am guessing when they tried to add it)

We have no access to the device, and cant seem to remove it as it keeps popping up again with alerts for the hack tool each day.

It is MDE managed and not intune managed so cant use the intune methods. Absolutely no access or control over the end device.

Any ideas how to get this off of our defender portal?  We dont own the device, have any responsibility over it or even know who owns it.

Thanks

Chris

​Hello! This may be a really stupid question. We have a device which keeps popping up in the Defender portal as having hack tools installed. We believe this belonged to an old consultant and somehow this got installed on their device a long time ago (it has no access to 365 and is not compliant but installed via intune I am guessing when they tried to add it) We have no access to the device, and cant seem to remove it as it keeps popping up again with alerts for the hack tool each day. It is MDE managed and not intune managed so cant use the intune methods. Absolutely no access or control over the end device.Any ideas how to get this off of our defender portal?  We dont own the device, have any responsibility over it or even know who owns it. ThanksChris  Read More

​