Investigation Package from Isolated Device

Panagiotis Chatzipanagiotou 0 Reputation points
2023-03-01T12:42:56.3533333+00:00

Hello all,

I have successfully isolated a device and am currently attempting to run an AV Scan and collect an investigation package from it.

Both activities have been submitted and appear as Pending in the action center.

However, no matter how long I wait, they never start and never complete, resulting in them failing after a few days. At the same time, I have been able to collect an investigation package from another non-isolated device within the organization

I am mostly interested in the Investigation Package and i was wondering:

  1. Is there an issue when trying to collect an investigation package from an isolated device?
  2. If yes, are there any settings I could tamper with to make it happen?
Microsoft 365
Microsoft 365
Formerly Office 365, is a line of subscription services offered by Microsoft which adds to and includes the Microsoft Office product line.
3,730 questions
{count} votes