Device that was sending telemetry data with Crowdstrike installed and is no longer sending telemetry data after the event time frame can be considered to be affected.

Another possible source is Crowdstike itself who definitely has the data.

lack of signal is also a signal

Does IME contact just Intel or also M$?