Copilot can delete your audit log
2025-08-26 20:27:50.266299+02 by Dan Lyke 0 comments
You might be thinking, “Yikes, but I guess not too many people figured that out, so it’s probably fine.” Unfortunately, you’d be wrong. When I found this, I wasn’t searching for ways to break the audit log. Instead, I was simply trying to trigger the audit log so I could test functionality we are developing at Pistachio, and I noticed it was unreliable. In other words, this can happen by chance. So if your organization has M365 Copilot licenses, your audit log is probably wrong.