Some users’ automated investigations may be failing in the Microsoft Defender for Endpoint portal

Title: Some users’ automated investigations may be failing in the Microsoft Defender for Endpoint portal
User impact: Users’ automated investigations may be failing in the Microsoft Defender for Endpoint portal.
More info: Users may see a status message for the failed automated investigations as “Terminated by System”.
Current status: We’ve observed that the automated investigations have been successfully re-executed for the majority the affected infrastructure, and we expect most users will no longer be experiencing the issue. We’re continuing to monitor the process as it runs for the final section of impacted infrastructure, to ensure full resolution. We expect the process to complete by the time of our next scheduled update.
Scope of impact: Any Security Operations Center user attempting to view the status of automated investigations in Microsoft Defender for Endpoint may be impacted.
Start time: Tuesday, January 16, 2024, at 8:00 AM UTC
Root cause: A recent configuration change caused some inter-service requests that automated investigations rely on to fail.
Next update by: Sunday, January 28, 2024, at 11:30 AM UTC

Comments

No comments yet. Why don’t you start the discussion?

Leave a Reply

Your email address will not be published. Required fields are marked *