Jun 01 2021 08:01 AM
Hi,
I would like to know if Sentinel can automatically sync the incidents which are closed in other Microsoft security portals. If it syncs automatically, what is the delay for each?
If anyone can help me with this information, it would be great!
Thanks
Jun 01 2021 09:53 AM
Jun 02 2021 01:35 AM
Jun 18 2021 05:56 AM
This is not entirely true. While it does close incidents on Portals such as security.microsoft.com and securitycenter.windows.com and so on, alerts on CloudAppSecurity portal are not closed. I am aware that Microsoft is trying to push usage of security.microsoft.com instead of multiple portals, I think it still needs to be closed on CloudAppSecurity portal. When my peers visit CloudAppSecurity portal and see 40 open alerts, eyebrows are raised.
Jun 21 2021 02:05 AM