Security Operations
Microsoft Sentinel - Incidents
โ“
IncidentTitleSeverityStatusOwnerLinked MDECreated
propera-1004 [ProPera] Phishing email with macro-enabled document delivered Medium New - INC-01004 2026-08-24 00:26
propera-1003 [ProPera] Lateral movement via SMB from compromised workstation High New - INC-01003 2026-08-21 04:52
Synchronization flow
MDE Incident โ†’ Sentinel Incident โ†’ Correlation โ†’ Investigation โ†’ Automation

Sentinel Alert โ†’ MDE Investigation โ†’ Device Analysis โ†’ MITRE Mapping โ†’ Response