Unprotected Devices Report for Defender Onboarding

This query generates a report of devices eligible for Microsoft Defender for Endpoint onboarding, aiding in identifying gaps in endpoint protection. The rule is valid.

Microsoft Sentinel (KQL)