Skip to main content

​
What it is

The Device Explorer at /device-explorer is the visual landing page for ThreatAware. It surfaces three things at a glance:
  1. Where in the world your devices are
  2. Which integrations are syncing right now, and how recently each one ran
  3. A live activity feed of what the platform is doing this very second
Device Explorer with a 3D globe of device locations, integration sync icons across the top, device counters, the search bar, an Average Health panel and the live activity feed Many customers set Device Explorer as the default landing page (in Settings → Misc → Change default homepage — choose Device Explorer).

​
Anatomy

​
Integration sync row

Across the top, every connected integration shows as an icon with its time-since-last-sync: Click any icon to jump to Settings → Integrations (titled “Systems” inside Settings) with that integration selected.

​
Estate counters

Two large counters sit at the top-right of the page:
  • Identified with delta arrow — total identified devices in the estate (e.g. 1,152 ↗ +4.4%)
  • Stealth with delta — unmanaged devices that people have used to sign in to your Microsoft 365 applications (e.g. 60 ↗ +100.0%). See Stealth Devices for how they’re found and how to switch it on.

​
Command bar

Type a query to search devices... — a unified search box that supports:
  • Free-text device-name search (ACS-31-)
  • The full query language (os:Windows AND tags:End-User)
  • Natural-language input (interpreted by AI in tenants with AI access enabled)
Hitting Enter takes you to Devices filtered to the matching set.

​
Global map

A 3D map rendering of your estate. Dots represent device clusters at each geographic location. Hover for the country and device count, click to filter the inventory. The map data comes from IP geolocation — see Glossary for how ThreatAware resolves device location.

​
Activity feed

Bottom-right shows a streaming feed of platform events:
This is the same data as Audit Log but filtered to active system operations and rendered live.

​
When to use Device Explorer vs. Devices

​
Tips

Make the map work for you. Hovering shows device count by region. If you operate across multiple offices, a quick map check confirms inventory shows up where it should before you go hunting in the inventory.
Set Device Explorer as homepage for the SOC. Analysts get an immediate confidence check that data is flowing, before they dive into Issues or the inventory.

​
Next steps

Device Management

Master the inventory grid

Query Language

The full search syntax

Integrations

Connect more sources