From Dev.to
Sentinel showed the same attack twice. Then it missed the next one.
Source: CD's readiness notes Sentinel-Readiness/Data Connector - M365D.md (free vs paid tables, bi-directional sync, the "duplicated incidents" checklist question), rebuilt as a lab story and cross-ch...