Sentinel showed the same attack twice. Then it missed the next one.

Source: CD's readiness notes Sentinel-Readiness/Data Connector - M365D.md (free vs paid tables,...