Forum Discussion
Microsoft sentinel Incident Sync with office 365 issue
Hello,
Eventhough i have all the connectors teorically needed, there is no way if we close a ticket in Microsoft defender/Alerts-incidents and get closed in Sentinel, is it possible?
- The Preview connector has bi-directional sync: https://docs.microsoft.com/en-us/azure/sentinel/microsoft-365-defender-sentinel-integration#common-use-cases-and-scenarios if this is the service you are referring to?
- Thank you for your answer,
Yes it means what i asked but i see it says that it does by default, the point is despite what it says there, when i close/update/asing an alert in Sentinel, never changes in the security panel in office 365 for any kind of alerts such as identity, cloud app or endpoint
