Incidents and Alerts - Suddenly missing.
Hello,
I really hope I don't embarrass myself here but I've been scrolling through Reddit/Google for hours with no luck.
License: Business Premium (Therefore, Microsoft 365 Defender for Office P1 also included).
Role: Global Administrator
My "Incidents" tab in security.microsoft.com had 3-5 incidents (and corresponding alerts in the alerts tab) yesterday and today it is now empty. Alerts says "No Data Available".
I can still see data in Emails & Collaboration alerts and also in the Alerts tab within Compliance/Purview.
I thought I would be clever and find the incidents by navigating from Sentinel SecurityIncidents logs however when I click to open in Defender XDR it says "You can't open this section - Sorry, you can’t access this section. Check with your administrator for the role-based access permissions to see the data.".
Starting to lose my mind trying to work out what is wrong and I am using the incidents API so it is vital that the incidents are populating.
Any help would be much appreciated!