Handling Hundreds of Open orphaned Alerts in Microsoft Defender for Cloud
Hello Community,
I have several hundred open alerts generated by Microsoft Defender for Cloud that haven’t been addressed. According to the documentation, it’s essential to review and handle these alerts to ensure the Machine Learning algorithm adapts to our environment. Should I process each alert individually, which is challenging due to the historical context and missing logs, or use a script to clean them up manually? How would you approach this situation?
Thanks in advance for your help!
Hello Community,I have several hundred open alerts generated by Microsoft Defender for Cloud that haven’t been addressed. According to the documentation, it’s essential to review and handle these alerts to ensure the Machine Learning algorithm adapts to our environment. Should I process each alert individually, which is challenging due to the historical context and missing logs, or use a script to clean them up manually? How would you approach this situation?Thanks in advance for your help! Read More