Environment
- EDR Windows Sensor: 7.2.2 and lower
- Microsoft Windows 11
Question
Why do Windows 11 devices (running build 10.0.2200) display as Windows 10 in the EDR console
Answer
Microsoft did not increment the build number's major version for Windows 11, so it is reported as build 10.0.2200, which was interpreted by the EDR 7.2.x sensors as Windows 10. Upgrading the sensor to 7.3.0 or newer will correctly display the Windows 11 version in the console.
Additional Notes
- The displayed OS version was fixed as part of CB-37273
