---
title: "Show a synced Defender device"
method: GET
path: "/defender_devices/{id}"
tags: ["Defender Devices"]
---

# Show a synced Defender device

`GET /defender_devices/{id}`

## Path parameters

- `id` string, required

## Response `200`

Defender device response

- DefenderDeviceResponse
  - `data` DefenderDevice — Device synced from Microsoft Defender for Endpoint
    - `last_seen_at` string, date-time, nullable
    - `machine_tags` string[], nullable
    - `managed_by` string, nullable
    - `vm_resource_id` string, nullable
    - `updated_at` string, date-time, nullable
    - `os_platform` string, nullable
    - `synced_at` string, date-time, required
    - `last_ip_address` string, nullable
    - `device_value` string, nullable
    - `inserted_at` string, date-time, nullable
    - `os_architecture` string, nullable
    - `rbac_group_name` string, nullable
    - `exposure_level` string, nullable
    - `defender_id` string, required
    - `entra_joined` boolean, nullable
    - `exclusion_reason` string, nullable
    - `vm_id` string, nullable
    - `vm_cloud_provider` string, nullable
    - `os_processor` string, nullable
    - `account_id` string, uuid, required
    - `merged_into_machine_id` string, nullable
    - `entra_device_id` string, nullable
    - `os_build` integer, nullable
    - `managed_by_status` string, nullable
    - `is_excluded` boolean, nullable
    - `vm_subscription_id` string, nullable
    - `last_external_ip_address` string, nullable
    - `health_status` string, nullable
    - `risk_score` string, nullable
    - `is_potential_duplication` boolean, nullable
    - `agent_version` string, nullable
    - `rbac_group_id` string, nullable
    - `version` string, nullable
    - `ip_addresses` object[], nullable
    - `onboarding_status` string, nullable
    - `computer_dns_name` string, nullable
    - `first_seen_at` string, date-time, nullable
    - `posture_provider_id` string, uuid, required

## Other responses

- `400` — Bad Request
- `401` — Unauthorized
- `403` — Forbidden
- `404` — Not Found
- `429` — Too Many Requests

---

[API](https://skmtc.dev/firezone/apis/firezone-api.md) · [All operations](https://skmtc.dev/firezone/apis/firezone-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/firezone/firezone-api/revisions/110de2cb2283/schema)