Forum Discussion
Anthony-123
Nov 14, 2023Iron Contributor
Unable to find the security alert in M365 Defender referenced in an email alert.
This happens a lot. I get these emails from Office365Alerts notifying our team that "A medium-severity alert has been triggered". At the bottom of the email is a link to "View alert details". When I ...
ArkadiuszOpoczko
Feb 02, 2024Brass Contributor
I have noticed the very same issue on several tenants. This is still present as of February 2024.
Same pattern here:
- alert is received with a URL "https://security.microsoft.com/alerts/unique_alert_ID_here"
- when followed opens up Security Admin Center and shows an error "Can't find it. Either what you are looking for doesn't exist or you need to use a different search string." not being able to locate the alert
- when I substitute security to compliance in the URL like this "https://compliance.microsoft.com/alerts/unique_alert_ID_here" it goes straight away to the details of the alert in question in the right - Compliance - Admin Center
I have raised a ticket with Microsoft but I'm getting nowhere.
I'm being asked to open up the alert again and records logs with Fiddler and Steps Recorder and provide sample alerts on and on, which I did once a week ago.
Now I'm being asked to do the same again. It seems that the engineer completely disregards the nature of the issue, symptoms and doesn't want to acknowledge that this is 100% a fault at the core of the internal template at the time of alert creation, not related to tenant, browser, user, whatever.
Seems like they haven't updated it after Security & Compliance ACs were separated into two.
It feels like I'm talking to a robot.
Hope we can get this resolved eventually.
muttersda
Mar 12, 2024Copper Contributor
For what it's worth, I'm also seeing this problem as of March 2024. I'll try my luck at opening a ticket...
- rayers1235Mar 25, 2024Copper Contributor
Yes, as of 3/24/24 this bug still exists.
Robert