 Internal telemetry and customer signals indicate the following services have been recovered. This is according to Microsoft. They include Defender, Defender or Endpoint, Defender Experts, Intune, OneNote, OneDrive for business.