Sync issues Sentinel and Microsoft 365 Defender (Security Center) - Part 2

Occasional Contributor

All,

I see strange things within the sync between Sentinel and Microsoft 365 Defender (Security Center)

When you assign an incident to yourself for example Email address removed, then the identity in security center is joe.smith__company.com#EXT#@company.onmicrosoft.com.

 

So when you use the filter option within security center and filter to "assign to me" you do not see the assigned incident

 

Arjan

1 Reply
in my post the email address is removed.....but it changes a normal e-mail address into the second e-mail address