Stopped Ingesting Microsoft Defender for Identity
Monitoring - As part of a previously communicated Microsoft deprecation, Expel is no longer ingesting Microsoft Defender for Identity alerts (via the Microsoft Defender for Cloud Apps integration). Any customers who have onboarded a Microsoft Defender XDR device have coverage and alerts are being processed.

We recommend that customers who have the Microsoft Defender for Cloud Apps integration, but have not yet onboarded Microsoft XDR to Workbench, complete the onboarding as soon as possible (https://support.expel.io/hc/en-us/articles/38928860545299-Microsoft-Defender-XDR-Setup-for-Workbench).

Please contact your Customer Success Manager if you need assistance with onboarding or if you have additional questions.
Apr 28, 2025 - 10:34 EDT
Expel Office 365 Phishing button
Identified - Microsoft is rolling out deprecation of legacy Exchange tokens that may prevent your users from being able to report emails using the Expel custom Office 365 Phishing button.

Expel is working on development and testing of an updated Expel O365/M365 Phishing button for web and desktop applications that will work with the NAA authentication scheme.

Until Expel is able to deploy the newly developed Phishing button, you should follow the instructions from Microsoft (https://learn.microsoft.com/en-us/office/dev/add-ins/outlook/turn-exchange-tokens-on-off) to enable legacy tokens for your tenant. It can take up to 24 hours for this change to take effect.

Contact support if you need assistance with this process.
Mar 17, 2025 - 10:03 EDT
Workbench availability Operational
Workbench global network connectivity Operational
Workbench login Operational
Workbench features Operational
Investigative actions Operational
File uploads Operational
Notifications Operational
Email Operational
Slack Operational
Teams Operational
Ticketing systems (via email, such as Jira) Operational
PagerDuty Operational
Opsgenie Operational
ServiceNow Operational
Assembler connectivity Operational
Alert ingestion Operational
Slack channels for customers Operational
Phishing submissions Operational
Operational
Degraded Performance
Partial Outage
Major Outage
Maintenance
System Metrics Month Week Day
Workbench global network connectivity ?
Fetching
Workbench availability ?
Fetching
May 16, 2025

No incidents reported today.

May 15, 2025
Scheduled Infrastructure Maintenance
Completed - The scheduled maintenance has been completed.
May 15, 11:00 EDT
In progress - Scheduled maintenance is currently in progress. We will provide updates as necessary.
May 15, 10:00 EDT
Scheduled - We will be undergoing routine maintenance between 10:00 - 11:00am ET on May 15th.

All notifications and alerts will be processed during the maintenance window, but may be affected by intermittent delays.
May 6, 09:53 EDT
Delayed Notifications
Resolved - This issue has been resolved. All notifications in the backlog have been delivered and new notifications are being delivered as normal.
May 15, 10:22 EDT
Monitoring - The action we've taken has stabilized notification delivery and we are monitoring while notifications are being delivered from the backlog. An update will be posted no later than 10:45am EST.
May 15, 10:15 EDT
Identified - We're experiencing a delay in delivering some notifications. We've identified the issue and are taking corrective action. We will provide another update by 10:30am EST.
May 15, 09:54 EDT
May 14, 2025

No incidents reported.

May 13, 2025
Intermittent service degradation to workbench actions
Resolved - The incident has been resolved, and Workbench investigative and remediation actions are fully available.
May 13, 18:07 EDT
Monitoring - We have resolved the root issue and our workbench actions capabilities have fully resumed normal operations as of 3:15 pm ET
May 13, 15:32 EDT
Update - While we have isolated the system with degraded performance, we continue the technical triage of the issue to determine the root case and restore full service as quickly as possible.

We will provide an update at 4 PM ET
May 13, 15:08 EDT
Investigating - We are actively investigating intermittent service degradation to Workbench investigative and remediation actions. Customers may not be able to access some sections of the portal as a side effect. We will provide an update at 3 PM ET
May 13, 14:37 EDT
Scheduled Infrastructure Maintenance
Completed - The scheduled maintenance has been completed.
May 13, 11:00 EDT
In progress - Scheduled maintenance is currently in progress. We will provide updates as necessary.
May 13, 10:00 EDT
Scheduled - We will be undergoing routine maintenance between 10:00 - 11:00am ET on May 13th.

All notifications and alerts will be processed during the maintenance window, but may be affected by intermittent delays.
May 6, 09:54 EDT
May 12, 2025

No incidents reported.

May 11, 2025

No incidents reported.

May 10, 2025

No incidents reported.

May 9, 2025

No incidents reported.

May 8, 2025

No incidents reported.

May 7, 2025

No incidents reported.

May 6, 2025

No incidents reported.

May 5, 2025

No incidents reported.

May 4, 2025

No incidents reported.

May 3, 2025

No incidents reported.

May 2, 2025
Scheduled Infrastructure Maintenance
Completed - The scheduled maintenance has been completed.
May 2, 11:00 EDT
In progress - Scheduled maintenance is currently in progress. We will provide updates as necessary.
May 2, 10:00 EDT
Scheduled - We will be undergoing routine maintenance between 10:00 - 11:00am ET on May 2nd.

All notifications and alerts will be processed during the maintenance window, but may be affected by intermittent delays.
Apr 25, 17:23 EDT
← Incident History Powered by Atlassian Statuspage