Skip to content

Commit 7873e78

Browse files
Add warning for Microsoft Defender XDR connector on offboarding
Added a warning about reconnecting the Microsoft Defender XDR connector after offboarding.
1 parent 57ad8de commit 7873e78

File tree

1 file changed

+2
-1
lines changed

1 file changed

+2
-1
lines changed

unified-secops-platform/microsoft-sentinel-onboard.md

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -137,7 +137,8 @@ When you switch the primary workspace for Microsoft Sentinel, the Defender XDR c
137137

138138
If you decide to offboard a workspace from the Defender portal, disconnect the workspace from the settings for Microsoft Sentinel.
139139

140-
If your workspace has the [Microsoft Defender XDR connector](/azure/sentinel/connect-microsoft-365-defender) configured, offboarding the workspace from the Defender portal will also disconnect the Microsoft Defender XDR connector.
140+
> [!WARNING]
141+
> If your workspace has the [Microsoft Defender XDR connector](/azure/sentinel/connect-microsoft-365-defender) configured, offboarding the workspace from the Defender portal will also disconnect the Microsoft Defender XDR connector. Make sure to reconnect the Microsoft Defender XDR connector if you want to receive Defender XDR incidents in Microsoft Sentinel again.
141142
142143
1. Go to the [Microsoft Defender portal](https://security.microsoft.com/) and sign in.
143144
1. In the Defender portal, under **System**, select **Settings** > **Microsoft Sentinel**.

0 commit comments

Comments
 (0)