Microsoft sentinel Incident Sync with office 365 issue

Copper Contributor


Eventhough i have all the connectors teorically needed, there is no way if we close a ticket in Microsoft defender/Alerts-incidents and get closed in Sentinel, is it possible?

2 Replies
The Preview connector has bi-directional sync: if this is the service you are referring to?
Thank you for your answer,
Yes it means what i asked but i see it says that it does by default, the point is despite what it says there, when i close/update/asing an alert in Sentinel, never changes in the security panel in office 365 for any kind of alerts such as identity, cloud app or endpoint