Discovered Software & Outdated Apps

The question it answers: Which end-of-life products, remote-access tools and badly outdated apps are installed on managed devices?

What is actually installed across managed devices: end-of-life software that gets no security fixes, remote-access tools IT did not deploy, and apps spread across many versions with devices left behind the newest one.

Note

‘Outdated installs’ compares against the newest version seen in your own fleet and only flags apps with more than three versions installed.

At a glance

Where in the app	Intune › Endpoint Security & Readiness › Discovered Software
Workload	Intune
Kind	Table
Data	Built from the tenant data IntensiveReports keeps in memory and refreshes in the background, so it opens at once.
Licence	Microsoft Intune.
Report id (API and MCP)	intune.endpoint.software-inventory

Columns

Column	Key	Type
Product	Name	Text
Category	Category	Status
Finding	Finding	Text
Installs	Devices	Text
Versions	Versions	Text
Newest seen	NewestVersion	Text
Behind newest	DevicesNotOnNewest	Text
Publisher	Publisher	Text
Platform	Platform	Text

Filters

Filter	Key (API)	On when the page opens
Only products with a finding	findings	Yes

What it needs

Licence: Microsoft Intune.

Application permissions on the IntensiveReports app registration (all permissions):

Permission	API	What it allows	Note
DeviceManagementManagedDevices.Read.All	Microsoft Graph	Read Microsoft Intune devices

Data sources it reads

• GET /v1.0/deviceManagement/detectedApps

Through the API and MCP

GET /ir-api/v1/reports/intune.endpoint.software-inventory?size=100
GET /ir-api/v1/reports/intune.endpoint.software-inventory?filter=findings

An AI assistant reads it with the MCP tool get_report and the id intune.endpoint.software-inventory. The client needs the Read grant for Intune. See Using the API.