Alerts retrieved from the Graph API which originated from Azure AD Identity Protection no longer seem to populate the
domainName fields for entries in the
This seems to have started around the end of September, and is impacting multiple tenants.
Is this expected behaviour, or a bug? I examined the Graph API changelog but couldn't find any reference to this change.