Some users’ automated investigations may be failing in the Microsoft Defender for Endpoint portal

Title: Some users’ automated investigations may be failing in the Microsoft Defender for Endpoint portal
User impact: Users’ automated investigations may be failing in the Microsoft Defender for Endpoint portal.
More info: Users may see a status message for the failed automated investigations as “Terminated by System”.
Current status: We’ve confirmed that re-running of the automated investigations has been progressing as expected and has already remediated impact to some of the affected infrastructure. We’re monitoring the progress of re-executing automated investigations for the remaining infrastructure and anticipate its completion by our next scheduled update.
Scope of impact: Any Security Operations Center user attempting to view the status of automated investigations in Microsoft Defender for Endpoint may be impacted.
Start time: Tuesday, January 16, 2024, at 8:00 AM UTC
Root cause: A recent configuration change caused some inter-service requests that automated investigations rely on to fail.
Next update by: Thursday, January 25, 2024, at 11:30 AM UTC

Comments

No comments yet. Why don’t you start the discussion?

Leave a Reply

Your email address will not be published. Required fields are marked *