Device EDR settings are not compliant Defender XDR DeviceTvmSecureConfigurationAssessment | join kind=inner DeviceTvmSecureConfigurationAssessmentKB on ConfigurationId | where IsCompliant == 0 and IsApplicable == 1 | where ConfigurationSubcategory == "EDR"