Title: Users may have experienced failures for live responses and automated investigation and response (AutoIR)
User impact: Users may have experienced failures for live responses and AutoIR in Microsoft Defender for Endpoint.
Final status: We’ve confirmed after monitoring the service that impact has been remediated.
Scope of impact: Impact was specific to any user who was served through the affected infrastructure.
Start time: Monday, November 20, 2023, at 9:05 AM UTC
End time: Monday, November 20, 2023 at 12:27 PM UTC
Root cause: A recent network authentication component misconfiguration, during a routine standard service update, was causing impact to occur.
Next steps:
– We’re reviewing our standard service update features including network authentication component configuration procedures to help prevent this issue from happening again.
This the final update for this event.
Posted inUncategorized