Forum Discussion
Disable Defender for Cloud Apps alerts
Hi all, we just enabled Defender for Cloud Apps in our environment (about 500 clients). We started with setting about 300 apps to "Unsanctioned". Now we get flooded with alerts. Mainly "Co...
You will need to create a tuning rule that will close the alert. This will not stop the alerts from being created, but it will stop them from flooding your incidents queue. Setting-->Defender XDR-->Alert tuning. Set it by alert title "Connection to a custom network indicator" and to close the alert. this is what worked for me.