Forum Discussion

Copper Contributor

May 13, 2022

Microsoft 365 defender alerts not capturing fields (entities) in azure sentinel

We got an alert from 365 defenders to azure sentinel ( A potentially malicious URL click was detected). To investigate this alert we have to check in the 365 defender portal. We noticed...

alerts

investigation

KQL

microsoft defender for cloud

microsoft defender for endpoint

microsoft defender for office 365

monitoring

siem

rp377

Copper Contributor

Jul 26, 2023

is this issue resolved ??

It is 2023 and I am also finding it difficult to receive entities details from Microsoft 365 Defender alerts in Sentinel for all the received alerts.

Markowski
Iron Contributor
Sep 29, 2025
I would also like to know. Has the issue been resolved since then, considering the tech you posses now?