Microsoft Secure Tech Accelerator
Apr 03 2024, 07:00 AM - 11:00 AM (PDT)
Microsoft Tech Community

Microsoft sentinel Incident Sync with office 365 issue

Copper Contributor

Hello,

Eventhough i have all the connectors teorically needed, there is no way if we close a ticket in Microsoft defender/Alerts-incidents and get closed in Sentinel, is it possible?

2 Replies
The Preview connector has bi-directional sync: https://docs.microsoft.com/en-us/azure/sentinel/microsoft-365-defender-sentinel-integration#common-u... if this is the service you are referring to?
Thank you for your answer,
Yes it means what i asked but i see it says that it does by default, the point is despite what it says there, when i close/update/asing an alert in Sentinel, never changes in the security panel in office 365 for any kind of alerts such as identity, cloud app or endpoint