Microsoft 365 Alert – Service Degradation – Microsoft Defender XDR – Some users’ automated investigations may be failing in the Microsoft Defender for Endpoint portal – RESOLVED

23/01/2024 09:35:00 AM

NHSMail Reference: INC41020089

Microsoft Reference: DZ709200

Issue Status: RESOLVED

Issue Description: Users’ automated investigations may be failing in the Microsoft Defender for Endpoint portal.

More info: Users may see a status message for the failed automated investigations as “Terminated by System”.

Final Update: 29/01/2024 08:50:00 AM – Microsoft have confirmed that service has been restored after monitoring the environment.

Scope of impact: Any Security Operations Center user attempting to view the status of automated investigations in Microsoft Defender for Endpoint may be impacted

Root cause: A recent configuration change caused some inter-service requests that automated investigations rely on to fail.

Next steps: Microsoft are reviewing their configuration change procedures to help prevent similar problems in the future.