Ticket Sync between Sentinel and Defender for Cloud Apps

Occasional Contributor



I have defender for Cloud APP syncing with sentinel to open incidents but when I close incidents in

Sentinel it doesn't close Defender for Cloud Apps alerts.


Is there any MSFT solution, I've already checked official MSFT links and so far I haven't found anything related to what I want.

Best regards

3 Replies



You need the Microsoft 365 Defender (preview) enabled to do sync between products.  




I will active the option Microsoft 365 Defender (preview) and validate if works and I will inform you.

Thank you for your help
The solution that you mention didn't work. The problem is the sync from sentinel to defender for cloud apps