Ticket Sync between Sentinel and Defender for Cloud Apps

Copper Contributor

Hello

 

I have defender for Cloud APP syncing with sentinel to open incidents but when I close incidents in

Sentinel it doesn't close Defender for Cloud Apps alerts.

 

Is there any MSFT solution, I've already checked official MSFT links and so far I haven't found anything related to what I want.

Best regards

3 Replies

@NAMM81 

 

You need the Microsoft 365 Defender (preview) enabled to do sync between products.  

Clive_Watson_0-1666181098656.png

 

Hello

I will active the option Microsoft 365 Defender (preview) and validate if works and I will inform you.

Thank you for your help
The solution that you mention didn't work. The problem is the sync from sentinel to defender for cloud apps