Google Cloud MAJOR

Mandiant Managed Defense reported issues with ingestion of some alerts from CrowdStrike Falcon integrations.

September 18, 2024 · 08:40 PM UTC – 10:51 PM UTC · Duration: 50h 11min

Affected Services

Mandiant Managed Defense

Timeline

10:51 PM
Our engineering team has completed their investigation and confirmed that there was no service degradation, and no supported alerts from CrowdStrike were missed during this period. Any discrepancy observed by our users between the Managed Defense portal and the third party security console would be due to recent changes in how detections are displayed within the CrowdStrike Falcon console. The Managed Defense service continues to operate as intended with the CrowdStrike Falcon integration. We appreciate your patience and understanding.
05:24 PM
Summary: Mandiant Managed Defense is experiencing issues with ingestion of some alerts from CrowdStrike integrations. Description: Our engineering team has identified the underlying cause for the issue and are working on steps required for mitigation. We do not have an ETA for mitigation at this point. We will provide more information by Wednesday, 2024-09-25 17:00 US/Pacific. Diagnosis: A subset of alerts from CrowdStrike integrations are not available for Managed Defense SOC analysis. Customers may not see all supported detection events from CrowdStrike in the Managed Defense Portal. Workaround: None at this time.
11:55 PM
Summary: Mandiant Managed Defense is experiencing issues with ingestion of some alerts from CrowdStrike integrations. Description: Our engineering team has identified the underlying cause for the issue and are working on steps required for mitigation. We do not have an ETA for mitigation at this point. We will provide more information by Thursday, 2024-09-19 10:00 US/Pacific. Diagnosis: A subset of alerts from CrowdStrike integrations are not available for Managed Defense SOC analysis. Customers may not see all supported detection events from CrowdStrike in the Managed Defense Portal. Workaround: None at this time.
10:40 PM
Summary: Mandiant Managed Defense is experiencing issues with ingestion of some alerts from CrowdStrike integrations. Description: Our engineering team has identified the underlying cause for the issue and are working on steps required for mitigation. We do not have an ETA for mitigation at this point. We will provide more information by Wednesday, 2024-09-18 16:00 US/Pacific. Diagnosis: A subset of alerts from CrowdStrike integrations are not available for Managed Defense SOC analysis. Customers may not see all supported detection events from CrowdStrike in the Managed Defense Portal. Workaround: None at this time.
09:38 PM
Summary: Mandiant Managed Defense is experiencing issues with ingestion of some alerts from CrowdStrike integrations. Description: We are experiencing an issue with Mandiant Managed Defense. Our engineering team continues to investigate the issue. We will provide an update by Wednesday, 2024-09-18 14:45 US/Pacific with current details. Diagnosis: A subset of alerts from CrowdStrike integrations are not available for Managed Defense SOC analysis. Customers may not see all supported detection events from CrowdStrike in the Managed Defense Portal. Workaround: None at this time.
09:11 PM
Summary: Mandiant Managed Defense is experiencing issues with ingestion of some alerts from CrowdStrike integrations. Description: We are experiencing an issue with Mandiant Managed Defense. Our engineering team continues to investigate the issue. We will provide an update by Wednesday, 2024-09-18 13:45 US/Pacific with current details. We apologize to all who are affected by the disruption. . Diagnosis: A subset of alerts from CrowdStrike integrations are not available for Managed Defense SOC analysis. Customers may not see all supported detection events from CrowdStrike in the Managed Defense Portal. Workaround: None at this time.