Microsoft Security Tech Accelerator
Dec 06 2023, 07:00 AM - 12:00 PM (PST)
Microsoft Tech Community

Rare User Account Update Incidents

Copper Contributor

Hello!

When I checked the Azure activity logs, I noticed that an account that is not in our AAD user list was updating the incidents. Does anyone know why this is happening?

ThantZinWin_0-1687841590664.png

 

2 Replies
Not sure if you've managed to find the answer yourself. I couldn't verify this anywhere in official MS documentation, so take the below with a pinch of salt!

This is an account (Caller) used by MS/Azure health service to communicate and push updates regarding ongoing, service-affecting incidents.
Same official comms can also be found here:
https://azure.status.microsoft/en-us/status/history/
Thank you for the reply.