Alert Consistency between Defender for Cloud Apps, Defender Portal, and Sentinel

Regular Visitor

I am working in an environment where I can see the alerts raised in portal.cloudappsecurity.com, but not consistently in security.microsoft.com.  I saw a couple alerts last week that looked to show up there, but nothing since.  I am also trying to get the alerts over to Sentinel.  I used the newer Microsoft Defender (Preview) data connector, and I can see all the activity logs come over, but not the alerts raised.  So I turned that off and turned on the older Microsoft Defender for Cloud Apps data connector, and it worked for a bit, but now doesn't show any alerts.  How can I ensure alert visibility across all of these MS services show up where they should?

0 Replies