Forum Discussion
Removing old M365 Defender incident email notification
Hi, Does anyone know where I can turn off the old M365 Defender incident email notifications? A while back I setup alerting for High incidents using this, but I cannot find that same notification...
Hi Tobias,
I remember that screen and it definitely did move didn’t it.
On the XDR portal have you tried scrolling down to Settings > Microsoft Defender XDR > Email Notifications? It should be right there under General.
This is also where you get the Threat Analytics reports in the 3rd tab. And the menu below that is the Alert Service settings for the other Defender for Cloud and Entra ID Protection alerts.
Best,
Dylan
I remember that screen and it definitely did move didn’t it.
On the XDR portal have you tried scrolling down to Settings > Microsoft Defender XDR > Email Notifications? It should be right there under General.
This is also where you get the Threat Analytics reports in the 3rd tab. And the menu below that is the Alert Service settings for the other Defender for Cloud and Entra ID Protection alerts.
Best,
Dylan
- Hello! Thank you for the response Dylan, and apologies for the delayed response from my side.
The Email Notifications under Settings -> Defender XDR is where I setup the new email notification. Changing this has no effect on the old email configuration. I am still getting duplicate alerts, and I have noticed that some of my customers are also experiencing the same problem.
I think MS have removed the old email configuration page, but somehow forgot to remove the rules itself?
