Title: Users may be intermittently unable to access specific pages of Automated investigation and response (AIR)
User impact: Users may be intermittently unable to access quarantine and submissions of AIR in Microsoft Defender for Office 365.
Current status: We’ve confirmed that our process of reallocating the service load across the affected infrastructure is 99 percent complete, and the majority of users are no longer impacted. We anticipate the final one percent of users hosted on the remaining impacted infrastructure will be remediated by our next scheduled update.
Scope of impact: Any user attempting to access the quarantine and submissions page of AIR in Microsoft Defender for Office 365 may be impacted.
Start time: Tuesday, January 23, 2024, at 8:00 AM UTC
Root cause: A component of Microsoft Defender Air infrastructure responsible for facilitating access to the quarantine and submissions pages is encountering an unusual increase in traffic that’s causing the component to operate below expected performance thresholds, resulting in impact.
Next update by: Monday, April 1, 2024, at 7:00 PM UTC
