Forum Discussion
Alerts
I don’t know if it’s me, but in the security and compliance area it seems we have to go to two different places to resolve or look at alerts. We have the new Security dashboard that only seems to surface the ones from Cloud App Security and then we need to go into Protection.office.com to close others.
Is there any chance this will be merged into one place.
Also in the security dashboard, in the alerts area there seems to be no way to filter out the resolved ones as I only want to see the active ones. Is that going to be changed I wonder?
If you have licenses that include CAS, stick to that IMO. The alerts section in the SCC doesn't offer anything more compared to CAS.
gzygadlo When you have an E5 licensed tenant the situation becomes blurry. 1) security.microsoft.com will present security type alerts. 2) compliance.microsoft.com will present compliance type alerts. 3) MCAS will alert on Azure integrated apps too 4) protection.office.com will alert on Office (ATP) products. Where do I look??
I have run in a situation where I see that not all alert types are presented in a single pane. For example mail phishing. I would have expected that phishing attempts are of interest for MCAS. However, only the security and protection portals present this type of alert.
In the end, email alerts save the day for operational follow up. However, I would have expected that the well promoted Microsoft Security Graph is able to give a helping hand in realizing the single pane of alerts.
