Forum Discussion
Unified Portal - Sentinel incident losing set tactics
Hi, Just trialling the unified portal, and incidents in Sentinel seem to lose any tactics set via the analytic rule. Plus the resulting incident has a slightly different title, assume after bein...
tipper1510 yes similar.
I have a NRT analytic rule in one tenant that’s affected. Like yours the title is mangled a little but what’s worse is the incident description that I pass through to my PSA using a playbook is completely lost.
when I look at the incident in Defender it’s all good but the analytic and playbook are worse off.
Same analytic in a different tenant where I haven’t enabled the unified portal works just fine.
Ross.