Some users’ automated investigations may have failed in the Microsoft Defender for Endpoint portal

Title: Some users’ automated investigations may have failed in the Microsoft Defender for Endpoint portal
User impact: Users’ automated investigations may have failed in the Microsoft Defender for Endpoint portal.
More info: Users may have seen a status message for the failed automated investigations as “Terminated by System”.
Final status: We’ve confirmed that service has been restored after monitoring the environment.
Scope of impact: Any Security Operations Center user who attempted to view the status of automated investigations in Microsoft Defender for Endpoint may have been impacted.
Start time: Tuesday, January 16, 2024, at 8:00 AM UTC
End time: Thursday, January 25, 2024, at 8:00 PM UTC
Root cause: A recent configuration change inadvertently caused some inter-service requests, which automated investigations rely on, to fail.
Next steps:
– We’re reviewing our configuration change procedures to help prevent similar problems in the future.
This is the final update for the event.