Microsoft Entra Suite Tech Accelerator
Aug 14 2024, 07:00 AM - 09:30 AM (PDT)
Microsoft Tech Community

Ticket Sync between Sentinel and Defender for Cloud Apps

Copper Contributor



I have defender for Cloud APP syncing with sentinel to open incidents but when I close incidents in

Sentinel it doesn't close Defender for Cloud Apps alerts.


Is there any MSFT solution, I've already checked official MSFT links and so far I haven't found anything related to what I want.

Best regards

3 Replies



You need the Microsoft 365 Defender (preview) enabled to do sync between products.  




I will active the option Microsoft 365 Defender (preview) and validate if works and I will inform you.

Thank you for your help
The solution that you mention didn't work. The problem is the sync from sentinel to defender for cloud apps