Forum Discussion
UCDWraith
Sep 08, 2021Copper Contributor
MCAS [Activity Policy] Log on from an outdated browser - current Teams client triggers alert
TLDR: Microsoft Teams client triggers 'Log on from an outdated browser' alert policy After enabling the MCAS - Activity Policy - 'Log on from an outdated browser' our current up-to-date deskto...
Primat
Dec 16, 2021Copper Contributor
I'm getting a lot of alerts for this scenario. I wrote a KQL query in sentinel which correlates the incident entities with Azure AD sign in logs and return incidents which contains "teams" in user-agent.(I think with sentinel playbooks, we can close this automatically). Is there any solution for this in MCAS itself?