All devices

The All devices tab lists every device your connected products know about, with your Endpoint Control endpoints merged in. Devices reported by your EDR (such as CrowdStrike, SentinelOne or Microsoft Defender), your device management (MDM, such as Intune or Jamf) and other products appear next to your fleet, one row per machine. Use it to see which hosts don't have the endpoint agent yet, and which products see each host.

You don't need Endpoint Control to use this tab. Without it, you see the devices your other products report, and the Example Corp sample fleet if your organisation has sample data.

Open All devices

Open Endpoints from the navigation menu and click the All devices tab. The fleet switcher is hidden on this tab: it always covers everything in the scope you are working in. The Scope selector in the page header decides which organisation's devices you see.

At the top, a summary line counts the devices, for example 152 devices · 20 covered by Endpoint Control · 132 only in other products. When some devices are only in other products, Install the agent on the rest opens Deploy (or setup, if your organisation has no fleet yet).

Filter and search

Control	What it does
Search	Search hostname, serial, IP, MAC…
All	Every device.
Both	Devices that Endpoint Control and at least one other product see.
Endpoint Control only	Devices that only Endpoint Control sees.
Other products only	Devices without the endpoint agent: only another product sees them.
Product filter	Every product, or one product. Each product is listed with its device count.

Each coverage chip shows its count. The counts follow your search and product filter.

Table columns

Column	What it shows
Device	The hostname, or the serial number when there is no hostname.
System	Operating system and version, when a product reports it.
Managed by	The logo and name of every product that reports the device, Endpoint Control first.
Coverage	Endpoint Control + other products, Endpoint Control only or Not covered by Endpoint Control. A device in your fleet also shows its online status.
Last seen	The most recent time any product reported the device.

The table shows 50 devices a page. Use Previous and Next to page through the list.

Open a device

Click a device that is in your fleet to open its endpoint page. See Endpoints and endpoint details.

Click any other device to open a summary: its platform, serial number, MAC and IP addresses, and Reported by, which lists each product and connection that reported it, with when each one last saw it. A device that isn't in your fleet shows Not covered by Endpoint Control and Install the agent.

How devices are matched

Huntbase shows one row for each machine. It matches what different products report in this order:

1. The hardware serial number.
2. The primary MAC address.
3. The short hostname (fin-lt-042 from FIN-LT-042.corp.example.com), but only when exactly one endpoint in your fleet has that name. Two endpoints both called build-01 stay separate, and so does a third build-01 from another product.

Two devices with different serial numbers are never merged.

The Also managed by column

The Endpoints tab gets an Also managed by column when another product reports any of your devices. It shows the other products (EDR, MDM and so on) that also see each endpoint. See Endpoints and endpoint details.

What the list can and can't show

• A device appears once a product names it. Other products' devices come from the findings and query results those products return in Huntbase. A device that no finding or query has named yet isn't listed. Huntbase doesn't read a complete host inventory from your EDR or MDM.
• Last seen means last named. For another product, Last seen is the last time one of its findings or query results named the device. It isn't when the device last checked in with that product, so a quiet host can look old.
• One connection per product. When several connections of the same product report a device, the most recent one is shown.
• Very large estates. If you have more devices than the list can read in one go, a note says "Only the most recently seen devices are shown, so the counts above may be low."
• Other products unavailable. If other products' devices can't be read, a note says so and only your Endpoint Control endpoints are listed. Try again in a few minutes.

If no other product reports devices yet, the tab says No other products report devices yet, with Go to Connections and Install the endpoint agent.

Next steps

• Connections — connect your EDR or MDM
• Get Endpoint Control — set up a fleet of your own
• Endpoint Control — install the endpoint agent on the rest
• Entities — devices as entities you can pivot on