Users may be intermittently unable to access specific pages of Automated investigation and response (AIR)

Title: Users may be intermittently unable to access specific pages of Automated investigation and response (AIR)

User impact: Users may be intermittently unable to access quarantine and submissions of AIR in Microsoft Defender for Office 365.

Current status: Our process of reallocating the service load across the affected infrastructure is taking longer than initially anticipated and is currently 90 percent complete. We expect the majority of users are no longer affected by this issue, and the remaining affected users will experience remediation incrementally as the reallocation process progresses. Based on the current saturation, we anticipate the impact for the remaining impacted users will be remediated by our next scheduled update.

Scope of impact: Any user attempting to access the quarantine and submissions page of AIR in Microsoft Defender for Office 365 may be impacted.

Start time: Tuesday, January 23, 2024, at 8:00 AM UTC

Root cause: A component of Microsoft Defender Air infrastructure responsible for facilitating access to the quarantine and submissions pages is encountering an unusual increase in traffic that’s causing the component to operate below expected performance thresholds, resulting in impact.

Next update by: Friday, March 29, 2024, at 7:00 PM UTC