Forum Discussion

Humza_Bukhari's avatar
Humza_Bukhari
Copper Contributor
Sep 22, 2023

SecurityAlert (MDATP) showing disable and we are not receiving logs In sentinel from M365 Defender

We have tried every possible way but still we are unable to receive any logs after connecting the data connector in sentinel for microsoft defender 365 .  SecurityAlert (MDATP) is showing disable . s...
LauriK000's avatar
LauriK000
Copper Contributor
Oct 18, 2023

Hi eliekarkafy 

I have the same issue but the given command gives me the following response.

 

eliekarkafy's avatar
eliekarkafy
MVP
Oct 18, 2023

LauriK000 thats means you have data ingested to the your analytics workspace through the connector . did you try to simulate an alert in MDE to check if your will get an incident created in MDE ? Dont forget to enable the Analytic rule to trigger incidents 

Resources