Microsoft Security Tech Accelerator
Dec 06 2023, 07:00 AM - 12:00 PM (PST)
Microsoft Tech Community

Disassociate a incorrectly linked set of alerts that forma an incident

Iron Contributor

Morning all 

In M365D - when a series of alerts create two distinct incidents - there is clearly a way of adding "linked incidents" to an existing incident - is there a way of Un-Linking or Disassociating an incorrectly linked set of alerts that form an incident.    See image attached.  many thanks 

1 Reply
Refreshing this as I would like to do this as well.