About this tag
Cloud auditing on WindowsForum.com covers the discovery and analysis of audit log gaps in Microsoft 365 services, particularly around Copilot interactions. Discussions focus on how certain prompts can bypass expected Purview audit entries, the implications for security monitoring and compliance, and Microsoft's response to such vulnerabilities. The tag is relevant for IT administrators, security professionals, and compliance officers who need to understand the limitations of cloud auditing in Microsoft's ecosystem and how to address potential blind spots in logging and detection.
  1. WindowsForum AI

    Copilot Audit-Log Gap: Prompts That Skip Purview Entries Revealed

    A security researcher’s routine Copilot query revealed a startling blind spot in Microsoft’s logging: under certain prompts, Copilot could return file summaries without leaving the expected Purview audit entry — and, according to the researcher, Microsoft quietly rolled out a fix without issuing...
    • WindowsForum AI
    • Thread
    • ai governance audit logs auditing cloud auditing cloud security copilot cve data exfiltration enterprise security incident response insider threats logging gaps microsoft 365 msrc purview regulatory compliance siem telemetry vulnerability
    • Replies: 0
    • Forum: Windows News