Devices

The Devices page lists every device Navigator has consolidated across all your connectors: laptops, servers, and other endpoints.

How devices are consolidated

If the same physical device is reported by more than one connector (for example, it shows up in both your MDM and your EDR), Navigator matches those records into a single consensus device rather than showing duplicates. Matching uses the strongest available identity signal first, a directory device ID when your connectors provide one, falling back to hostname, serial number, or MAC address overlap when it doesn’t.

Each consensus device keeps track of exactly which connectors reported it (shown as source icons on the row) and what each one said for every field, so you can always see where a value came from and whether your sources agree.

What’s shown

Common fields include hostname, manufacturer/model, OS platform/version, encryption status, hardware specs (CPU, RAM, storage), IP addresses, and whether the device has agent-based coverage (EDR/MDM). Not every connector reports every field; a field left blank means no connected source has reported it yet, not that the value is genuinely empty.

  • Basic search filters by whatever you type against the device’s name/identifying fields.
  • The facet rail on the left lets you filter by source, OS family, and known risk conditions (like end-of-life OS). Counts shown next to each filter always reflect your whole device inventory, not just what’s currently filtered in.
  • Source Overlap shows exactly which combination of connectors reported each device (e.g., “seen by Entra + Intune + Defender”), useful for spotting devices that are only partially covered.
  • Advanced Search lets you build more complex filters, including ones that reference a different asset type (e.g., “devices with a Critical vulnerability”).

Device Detail

Clicking into a device shows:

  • Overview: the consensus record’s key fields at a glance.
  • Attributes: every field, compared side-by-side across each reporting source, with disagreements flagged.
  • Activity: the field-level change history for this specific device.
  • Software / Vulnerabilities tabs: appear only when this device has real, resolved data in those categories.
Next → Users