Investigating issues with Microsoft Defender

Incident Report for Red Canary

Resolved

Monitoring has confirmed the system is operating normally and detections are no longer delayed.

Posted Sep 27, 2023 - 21:33 UTC

Investigating

We are investigating ingestion issues with Microsoft Defender (hosted by Microsoft Defender). We have notified the Microsoft Defender production engineering team and are working with them to ensure they resolve the issue promptly.

Sensor telemetry, events, and detections may be delayed in our Web Portal, APIs, and systems that leverage those APIs such as Canary Exporter. New sensor connections and installations may be impacted.

Posted Sep 27, 2023 - 17:41 UTC

This incident affected: Endpoint Telemetry Ingestion (Microsoft).