From 41a108427b1b6bde97b3b51673872e993f0d97cd Mon Sep 17 00:00:00 2001
From: Tungst <77620790+tungsec@users.noreply.github.com>
Date: Tue, 5 Aug 2025 09:51:56 +0200
Subject: [PATCH] Update microsoft-sentinel-onboard.md

Adding information on the Microsoft Defender XDR connector being disconnected.
---
 unified-secops-platform/microsoft-sentinel-onboard.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/unified-secops-platform/microsoft-sentinel-onboard.md b/unified-secops-platform/microsoft-sentinel-onboard.md
index 53495b3aa7..5efa311a1f 100644
--- a/unified-secops-platform/microsoft-sentinel-onboard.md
+++ b/unified-secops-platform/microsoft-sentinel-onboard.md
@@ -167,7 +167,7 @@ If you decide to offboard a workspace from the Defender portal, disconnect the w
 1. Provide a reason why you're disconnecting the workspace. 
 1. Confirm your selection.
 
-   When your workspace is disconnected, the **Microsoft Sentinel** section is removed from the left-hand side navigation of the Defender portal. Data from Microsoft Sentinel is no longer included on the **Home** page.
+   When your workspace is disconnected, the **Microsoft Sentinel** section is removed from the left-hand side navigation of the Defender portal. Data from Microsoft Sentinel is no longer included on the **Home** page. Additionally, the Microsoft Defender XDR connector in Microsoft Sentinel is disconnected from the workspace.
 
 If you want to connect to a different workspace, from the **Workspaces** page, select the workspace and **Connect a workspace**.