Reviewing device anomalies

Advanced Endpoint Analytics is another feature of Intune Suite, and it is split into three components:

• Device anomaly detection: This uses machine learning to look for trends across your estate and alert you of any potential issues. This is what we will be covering in this recipe.
• Custom device scopes: This allows you to add scope tags to the Endpoint Analytics Reports to give different permissions to different groups of administrators. For example, you could provide a business unit access to only review reports for their particular devices. You can find out more about this at https://learn.microsoft.com/en-us/mem/analytics/device-scopes.
• Enhanced device timeline: This expands the history of events for any particular device to give a more thorough view of what has been happening. You can learn more about this feature at https://learn.microsoft.com/en-us/mem/analytics/enhanced-device-timeline.

You can then leverage anomaly detection...