Alert Investigation for Microsoft Defender Suite

This incident has been resolved. We've confirmed the issue was resolved by Microsoft.

We have been in communication with our contacts at Microsoft and believe this issue has now been fixed on their end. We are continuing to monitor the incoming data but believe this incident has been resolved. We will post a final update here once we have further confirmation from Microsoft.

Red Canary is currently investigating a data discrepancy between the Microsoft Defender Suite Graph API and the Microsoft Defender Console which is preventing Red Canary from receiving complete contextual alert data. During this time some impacted alerts may require customer investigation or result in delayed detections.