Blog Post

Microsoft Defender for Cloud Blog
10 MIN READ

Closing an Incident in Azure Sentinel and Dismissing an Alert in Azure Security Center

Nathan Swift's avatar
Nathan Swift
Icon for Microsoft rankMicrosoft
Feb 19, 2020
As we are exploring automation scenarios within Azure Security , we come across an unsolved mystery. When I use Azure Security Center connector into Azure Sentinel and generate Incidents, what happen...
Updated Feb 19, 2020
Version 2.0
Nathan Swift's avatar
Icon for Microsoft rankMicrosoft
Joined October 09, 2018
View Profile
Microsoft Defender for Cloud Blog

Microsoft Defender for Cloud is a cloud-native application protection platform (CNAPP) that offers security and compliance from code to runtime, enhanced by AI, for hybrid and multicloud environments.

When evaluating various solutions, your peers value hearing from people like you who’ve used the product. Review Microsoft Defender for Cloud by filling out a Gartner Peer Insights survey and receive a $25 USD gift card (for customers only). Here are the Privacy/Guideline links: Microsoft Privacy Statement, Gartner’s Community Guidelines & Gartner Peer Insights Review Guide.

Nathan Swift's avatar
Nathan Swift
Icon for Microsoft rankMicrosoft
Aug 10, 2020

Thanks I would check out the private previews and Azure Road map on this item. At this time I am not working on a sync between both systems, it would have to correlate and prevent race conditions between the two platforms in Logic App code. One might be able to build a one way sync the other way though scan dismissed ASC alerts or trigger off the Azure Activity Logs for dismissed alert, potentially correlate SecurityAlertId to AzureSentinel incident and close Sentinel incident.