{"id":14970,"date":"2026-02-14T01:01:05","date_gmt":"2026-02-13T16:01:05","guid":{"rendered":"https:\/\/m365jp.net\/?p=14970"},"modified":"2026-02-14T01:06:27","modified_gmt":"2026-02-13T16:06:27","slug":"servicerestored-dz1231408-microsoft-defender-xdr-admins-manual-remediations-werent-shown-on-the-action-history-page-in-the-microsoft-defender-xdr-portal-2","status":"publish","type":"post","link":"https:\/\/m365jp.net\/index.php\/2026-02-14-servicerestored-dz1231408-microsoft-defender-xdr-admins-manual-remediations-werent-shown-on-the-action-history-page-in-the-microsoft-defender-xdr-portal-2","title":{"rendered":"[serviceRestored] DZ1231408 | Microsoft Defender XDR | Admins&#8217; manual remediations weren&#8217;t shown on the action history page in the Microsoft Defender XDR portal"},"content":{"rendered":"<div class=\"postie-post\">\n<div>\n<hr>\n<table id=\"section\">\n<tbody>\n<tr>\n<th width=\"95%\">DZ1231408 | Microsoft Defender XDR | Admins&#8217; manual remediations weren&#8217;t shown on the action history page in the Microsoft Defender XDR portal  <\/th>\n<\/tr>\n<\/tbody>\n<\/table>\n<hr>\n<table id=\"data\">\n<tbody>\n<tr>\n<th>Status<\/th>\n<td class=\"bad\">serviceRestored<\/td>\n<\/tr>\n<tr>\n<th>Classification<\/th>\n<td>advisory<\/td>\n<\/tr>\n<tr>\n<th>User Impact<\/th>\n<td>Admins&#8217; manual remediations weren&#8217;t shown on the action history page in the Microsoft Defender XDR portal.  <\/td>\n<\/tr>\n<tr>\n<th>Last Updated<\/th>\n<td>02\/13\/2026 15:44:53<\/td>\n<\/tr>\n<tr>\n<th>Start Time<\/th>\n<td>02\/11\/2026 11:59:00<\/td>\n<\/tr>\n<tr>\n<th>End Time<\/th>\n<td>02\/13\/2026 09:43:00<\/td>\n<\/tr>\n<tr>\n<th>Latest Message<\/th>\n<td>Title: Admins&#8217; manual remediations weren&#8217;t shown on the action history page in the Microsoft Defender XDR portal  <\/p>\n<p>  User impact: Admins&#8217; manual remediations weren&#8217;t shown on the action history page in the Microsoft Defender XDR portal.  <\/p>\n<p>  More info: When admins performed a manual remediation, an Approval ID is generated; however, the investigation ID and Approval ID weren&#8217;t shown on the action history page.<\/p>\n<p>  The two-step approval process was missing from the action center\/pending page in the Microsoft Defender XDR portal. This issue only affected manual actions completed via Threat explorer, Advanced Hunting, Take action wizard, Custom detection and Graph API.   There was no problem with action processing; the issue was with the entries displaying in the Action center.<\/p>\n<p>  As a way to circumvent impact whilst we worked to resolve the issue, affected admins could&#8217;ve viewed the status of manual remediations through Microsoft Defender Threat Explorer by applying the following filter in the Query Builder: Additional action == Manual   remediation. Alternatively, the status could be seen using Advanced Hunting by utilizing EmailPostDeliveryEvents and filtering by ActionType.  <\/p>\n<p>  Final status: We\u2019ve successfully reverted the recent change and confirmed through service monitoring that impact has been fully remediated.  <\/p>\n<p>  Scope of impact: Your organization was affected by this event, and any admin attempting to view manual remediations on the action history page in the Microsoft Defender XDR portal was impacted.  <\/p>\n<p>  Start time: Wednesday, February 11, 2026, at 11:59 AM UTC<\/p>\n<p>  End time: Friday, February 13, 2026, at 9:43 AM UTC<\/p>\n<p>  Root cause: A code regression was introduced in a recent configuration change.<\/p>\n<p>  Next steps:<br \/>  &#8211; We&#8217;re reviewing our standard service update procedures to avoid similar impact in the future.<\/p>\n<p>  This is the final update for the event.<\/td>\n<\/tr>\n<tr>\n<th>Machine Translation<\/th>\n<td>\u30bf\u30a4\u30c8\u30eb:\u7ba1\u7406\u8005\u306e\u624b\u52d5\u4fee\u5fa9\u306fMicrosoft Defender XDR\u30dd\u30fc\u30bf\u30eb\u306e\u30a2\u30af\u30b7\u30e7\u30f3\u5c65\u6b74\u30da\u30fc\u30b8\u306b\u8868\u793a\u3055\u308c\u3066\u3044\u307e\u305b\u3093\u3067\u3057\u305f<\/p>\n<p>  \u30e6\u30fc\u30b6\u30fc\u3078\u306e\u5f71\u97ff:\u7ba1\u7406\u8005\u306e\u624b\u52d5\u4fee\u5fa9\u306fMicrosoft Defender XDR\u30dd\u30fc\u30bf\u30eb\u306e\u30a2\u30af\u30b7\u30e7\u30f3\u5c65\u6b74\u30da\u30fc\u30b8\u306b\u8868\u793a\u3055\u308c\u307e\u305b\u3093\u3067\u3057\u305f\u3002<\/p>\n<p>  \u8a73\u7d30\u60c5\u5831:\u7ba1\u7406\u8005\u304c\u624b\u52d5\u3067\u4fee\u5fa9\u3092\u884c\u3046\u3068\u3001\u627f\u8a8dID\u304c\u751f\u6210\u3055\u308c\u307e\u3059\u3002\u3057\u304b\u3057\u3001\u8abf\u67fbID\u3068\u627f\u8a8dID\u306f\u30a2\u30af\u30b7\u30e7\u30f3\u5c65\u6b74\u30da\u30fc\u30b8\u306b\u8868\u793a\u3055\u308c\u3066\u3044\u307e\u305b\u3093\u3067\u3057\u305f\u3002<\/p>\n<p>  Microsoft Defender XDR\u30dd\u30fc\u30bf\u30eb\u306e\u30a2\u30af\u30b7\u30e7\u30f3\u30bb\u30f3\u30bf\u30fc\/\u4fdd\u7559\u30da\u30fc\u30b8\u306b\u306f\u30012\u6bb5\u968e\u306e\u627f\u8a8d\u30d7\u30ed\u30bb\u30b9\u304c\u6b20\u3051\u3066\u3044\u307e\u3057\u305f\u3002\u3053\u306e\u554f\u984c\u306f\u3001\u8105\u5a01\u30a8\u30af\u30b9\u30d7\u30ed\u30fc\u30e9\u30fc\u3001\u30a2\u30c9\u30d0\u30f3\u30b9\u30c9\u30cf\u30f3\u30c6\u30a3\u30f3\u30b0\u3001\u30a2\u30af\u30b7\u30e7\u30f3\u5b9f\u884c\u30a6\u30a3\u30b6\u30fc\u30c9\u3001\u30ab\u30b9\u30bf\u30e0\u691c\u51fa\u3001\u30b0\u30e9\u30d5API\u3092\u901a\u3058\u3066\u884c\u3046\u624b\u52d5\u64cd\u4f5c\u306b\u306e\u307f\u5f71\u97ff\u3057\u307e\u3057\u305f\u3002\u30a2\u30af\u30b7\u30e7\u30f3\u51e6\u7406\u306b\u306f\u554f\u984c\u304c\u306a\u304b\u3063\u305f\u3002\u554f\u984c\u306f\u30a2\u30af\u30b7\u30e7\u30f3\u30bb\u30f3\u30bf\u30fc\u306b\u8868\u793a\u3055\u308c\u308b\u30a8\u30f3\u30c8\u30ea\u30fc\u306b\u3042\u308a\u307e\u3057\u305f\u3002<\/p>\n<p>  \u554f\u984c\u89e3\u6c7a\u4f5c\u696d\u4e2d\u306b\u5f71\u97ff\u3092\u56de\u907f\u3059\u308b\u65b9\u6cd5\u3068\u3057\u3066\u3001\u5f71\u97ff\u3092\u53d7\u3051\u305f\u7ba1\u7406\u8005\u306fMicrosoft Defender Threat Explorer\u3067\u30af\u30a8\u30ea\u30d3\u30eb\u30c0\u30fc\u5185\u306e\u4ee5\u4e0b\u306e\u30d5\u30a3\u30eb\u30bf\u30fc\u3092\u9069\u7528\u3057\u3066\u624b\u52d5\u4fee\u5fa9\u306e\u72b6\u6cc1\u3092\u78ba\u8a8d\u3059\u308b\u3053\u3068\u304c\u3067\u304d\u307e\u3057\u305f:\u8ffd\u52a0\u30a2\u30af\u30b7\u30e7\u30f3 == \u624b\u52d5\u4fee\u5fa9\u3002\u307e\u305f\u306f\u3001Advanced Hunting\u3092\u4f7f\u3063\u3066EmailPostDeliveryEvents\u3092\u5229\u7528\u3057\u3001ActionType\u3067\u30d5\u30a3\u30eb\u30bf\u30ea\u30f3\u30b0\u3059\u308b\u3053\u3068\u3067\u30b9\u30c6\u30fc\u30bf\u30b9\u3092\u78ba\u8a8d\u3059\u308b\u3053\u3068\u3082\u3067\u304d\u307e\u3059\u3002<\/p>\n<p>  \u6700\u7d42\u72b6\u6cc1:\u6700\u8fd1\u306e\u5909\u66f4\u3092\u7121\u4e8b\u5143\u306b\u623b\u3057\u3001\u30b5\u30fc\u30d3\u30b9\u30e2\u30cb\u30bf\u30ea\u30f3\u30b0\u3092\u901a\u3058\u3066\u5f71\u97ff\u304c\u5b8c\u5168\u306b\u662f\u6b63\u3055\u308c\u305f\u3053\u3068\u3092\u78ba\u8a8d\u3057\u307e\u3057\u305f\u3002<\/p>\n<p>  \u5f71\u97ff\u7bc4\u56f2:\u8cb4\u7d44\u7e54\u306f\u3053\u306e\u30a4\u30d9\u30f3\u30c8\u306e\u5f71\u97ff\u3092\u53d7\u3051\u3001Microsoft Defender XDR\u30dd\u30fc\u30bf\u30eb\u306e\u30a2\u30af\u30b7\u30e7\u30f3\u5c65\u6b74\u30da\u30fc\u30b8\u3067\u624b\u52d5\u306e\u4fee\u5fa9\u3092\u78ba\u8a8d\u3057\u3088\u3046\u3068\u3057\u305f\u7ba1\u7406\u8005\u306f\u5f71\u97ff\u3092\u53d7\u3051\u307e\u3057\u305f\u3002<\/p>\n<p>  \u958b\u59cb\u6642\u9593:2026\u5e742\u670811\u65e5\u6c34\u66dc\u65e5 \u5348\u524d11\u664259\u5206 UTC<\/p>\n<p>  \u7d42\u4e86\u6642\u523b:2026\u5e742\u670813\u65e5\u91d1\u66dc\u65e5 \u5348\u524d9\u664243\u5206 UTC<\/p>\n<p>  \u6839\u672c\u539f\u56e0:\u6700\u8fd1\u306e\u8a2d\u5b9a\u5909\u66f4\u3067\u30b3\u30fc\u30c9\u56de\u5e30\u304c\u5c0e\u5165\u3055\u308c\u307e\u3057\u305f\u3002<\/p>\n<p>  \u6b21\u306e\u30b9\u30c6\u30c3\u30d7:<br \/>  &#8211; \u4eca\u5f8c\u540c\u69d8\u306e\u5f71\u97ff\u3092\u907f\u3051\u308b\u305f\u3081\u3001\u6a19\u6e96\u7684\u306a\u30b5\u30fc\u30d3\u30b9\u66f4\u65b0\u624b\u9806\u3092\u898b\u76f4\u3057\u3066\u3044\u307e\u3059\u3002<\/p>\n<p>  \u3053\u308c\u304c\u30a4\u30d9\u30f3\u30c8\u306e\u6700\u7d42\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u3067\u3059\u3002<\/td>\n<\/tr>\n<\/tbody>\n<\/table><\/div>\n<\/div>\n","protected":false},"excerpt":{"rendered":"<p>DZ1231408 | Microsoft Defender XDR | Admins&#8217; manual remediations weren&#8217;t shown on the action histo [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-14970","post","type-post","status-publish","format-standard","hentry","category-uncategorized"],"_links":{"self":[{"href":"https:\/\/m365jp.net\/index.php\/wp-json\/wp\/v2\/posts\/14970","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/m365jp.net\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/m365jp.net\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/m365jp.net\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/m365jp.net\/index.php\/wp-json\/wp\/v2\/comments?post=14970"}],"version-history":[{"count":0,"href":"https:\/\/m365jp.net\/index.php\/wp-json\/wp\/v2\/posts\/14970\/revisions"}],"wp:attachment":[{"href":"https:\/\/m365jp.net\/index.php\/wp-json\/wp\/v2\/media?parent=14970"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/m365jp.net\/index.php\/wp-json\/wp\/v2\/categories?post=14970"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/m365jp.net\/index.php\/wp-json\/wp\/v2\/tags?post=14970"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}