Forum Discussion

BcyberS's avatar
BcyberS
Brass Contributor
May 16, 2022

Azure Active Directory Identity Identity protection alerts suppression

We have sentinel ingesting incidents from Identity protection Risky users, sign-ins and detections from Azure portal > Azure Active Directory > Security. However, Sentinel is getting inundates with a...
analytics
azure
siem
ebwilson's avatar
ebwilson
Copper Contributor
Nov 09, 2022

BcyberS So before like...last week, I could suppress the alerts in Defender so they never made it to Sentinel - however with the new Azure Identity Management that came out just recently - there's no way to suppress atypical travel alerts. As soon as I figure it out, I'll update you.