Confusing Evidence

I have a Stale Externally shared files involving one user incident that shows User Activity (1), but when I look at the Users Activities tab in M365 Defender is says "No user activities found". Has anyone else seen this type of inconsistency? Is this a known bug?