Sync issues Sentinel and Microsoft 365 Defender (Security Center) - Part 2

[Arjan Veen, van]

All,

I see strange things within the sync between Sentinel and Microsoft 365 Defender (Security Center)

When you assign an incident to yourself for example Email address removed, then the identity in security center is joe.smith__company.com#EXT#@company.onmicrosoft.com.

So when you use the filter option within security center and filter to "assign to me" you do not see the assigned incident

Arjan

[#2]

in my post the email address is removed.....but it changes a normal e-mail address into the second e-mail address