I'm using 2019.04 and monitoring a large windows estate with agents. I run a SWIS script hourly to find nodes without ADM enabled and enable it. So far so good. That said it appears to be picking up dependencies that are not really there i.e. a process on a server A talking to a process/service on Node B is showing on ADM against Node A but it's not really happening.
How does ADM actually work? Is it looking at TCP/UCP stats on the boxes?