23/01/2024 09:35:00 AM
NHSMail Reference: INC41020089
Microsoft Reference: DZ709200
Issue Status: RESOLVED
Issue Description: Users’ automated investigations may be failing in the Microsoft Defender for Endpoint portal.
More info: Users may see a status message for the failed automated investigations as “Terminated by System”.
Final Update: 29/01/2024 08:50:00 AM – Microsoft have confirmed that service has been restored after monitoring the environment.
Scope of impact: Any Security Operations Center user attempting to view the status of automated investigations in Microsoft Defender for Endpoint may be impacted
Root cause: A recent configuration change caused some inter-service requests that automated investigations rely on to fail.
Next steps: Microsoft are reviewing their configuration change procedures to help prevent similar problems in the future.