Forum Discussion
Solved
No option to tune analytics rule with Microsoft 365 Defender connector
Greetings, i have been working with a few different customers and when trying to configure the Defender for O365 alert "Email messages containing malicious URL removed after delivery", however there ...
- You can't update those rules as it uses an integrated bi-directional sync engine.
The best way is to use automation rules to update these incidents based on certain conditions.
I always work for an MSP that runs a SOC.
You can setup priority for automation rules.
I close the incidents first and then only sync them
You can setup priority for automation rules.
I close the incidents first and then only sync them
I will try to do this and see if it works. Thanks for answers 🙂