Forum Discussion
Some accounts missing Azure AD Object ID
Hi all There is something that has been annoying me for a while and I felt it's finally time to post abount it. We have a hybrid AD-AAD setup with a user sync up and running since years back, that ...
TheHoff70 the analytics that are mapped to the playbook, have they been mapped with the appropriate entities for azure object IDs?
This will surface the specific information for the playbooks to fire properly against the alert when it is triggered?
Check out this link to further information
https://learn.microsoft.com/en-us/azure/sentinel/map-data-fields-to-entities
- I've been trying back and forth with both with different entity mappings like DNS domain+UPN, "Full Name" or domain+UPN but so far no luck.
