Forum Discussion
susanthasilva
Sep 06, 2021Brass Contributor
Closing alerts in Azure Sentinel does not automatically close in Cloud App Security console
We have both Cloud App Security and Azure Sentinel deploy on the environment. When we get alerts from Cloud App Security to Azure Sentinel, we overlook the incidents and close them accordingly. When ...
Rod_Trent
Microsoft
Sep 06, 2021This capability is coming.
However, in the interim there's a Playbook available that will accomplish this for you: https://github.com/Azure/Azure-Sentinel/tree/master/Playbooks/Close-Incident-MCAS
- susanthasilvaSep 07, 2021Brass ContributorThanks Rodtrent. Let me check on this Playbook on customer's environment.