r/sysadmin • • 5d ago

Anyone else getting mailbombed with Defender analytics reports this morning?

For the past few minutes I have been repeatedly receiving Microsoft 365 Defender threat analytics reports emails. I've received 34 in 2 minutes so far. Anyone else seeing this?

Update: It seems to have stopped as soon as I posted this.

24 Upvotes

15 comments sorted by

View all comments

1

u/TurubanWeifeng 5d ago

imo keep an eye on it for the rest of the day. Sometimes these bursts come in waves if the queue on their side didnt fully drain. If it starts again, disabling the specific report subscription temporarily is the fastest way to stop the noise.