Datadog Finds Intermittent Audit-Logging Gaps in Microsoft Copilot Studio

Summary

Datadog found four Copilot Studio administrative events missing during 2025 testing. After Microsoft's fix, authentication and App Insights events remained intermittently unlogged. Datadog reported the regression to MSRC, which could not reproduce it.

Key points

Datadog tested Copilot Studio actions and found four administrative audit events missing: authentication updates, App Insights updates, sharing, and publishing.
The researchers waited up to 24 hours for events to appear in Microsoft Purview’s Unified Audit Log before concluding they were missing.
Microsoft initially remediated the logging gaps, and Datadog confirmed the four events were logging during retesting; later tests found authentication and App Insights events were intermittent.
Datadog says an Editor could have removed agent authentication, disabled App Insights logging, shared or published an agent without those actions appearing in audit records.
Datadog warned that these changes could have enabled unauthenticated access to agent data without logging the subsequent interactions; this is a described potential impact, not a confirmed incident.
Datadog reported the regression to MSRC, which said its engineering team could not reproduce the anomalous behavior as of March 2, 2026.
The article provides searches for Copilot Studio sign-ins, PowerPlatform Bot operations, and ApiEndpointCallEvent activity to help teams investigate usage.

Article Details

Attack Vectors: During the reported logging gaps, a person with the Editor role could remove an agent’s authentication, disable App Insights logging, share the agent, or publish updated versions without the corresponding audit events being generated.
The article describes a potential scenario in which an attacker removes authentication, disables conversation logging, publishes the changes, and interacts with the agent anonymously to access its data. This is presented as a possible impact, not as a confirmed incident.
Defensive Notes: For the affected period, investigate general Copilot Studio activity using the application ID 96ff4394-9197-43aa-b393-6a41652e21f8, PowerPlatform operations matching *Bot*, and ApiEndpointCallEvent activity.
Review NonInteractiveUserSignInLogs and MicrosoftGraphActivityLogs for activity associated with the Copilot Studio application ID.
Monitor BotUpdateOperation-BotAuthUpdate and BotUpdateOperation-BotAppInsightsUpdate for authentication or App Insights changes, and consider detecting high-volume BotPublish and BotShare events.
The article reports that MSRC initially remediated logging by October 5, 2025, but Datadog later observed intermittent gaps in the authentication and App Insights events. Datadog said it continued to report the issue to MSRC.

MITRE ATT&CK

T1562.008 · Disable or Modify Cloud LogsIn the described potential attack scenario, an Editor disables App Insights logging for a Copilot Studio agent, including conversation logging, to reduce visibility of subsequent activity.

Vendors

DatadogDatadog found that from at least August 29, 2025 to September 25, 2025 Microsoft Copilot Studio did not log certain administrative actions involving sharing, authentication, App Insights, and publication of agents.MicrosoftDatadog found that from at least August 29, 2025 to September 25, 2025 Microsoft Copilot Studio did not log certain administrative actions involving sharing, authentication, App Insights, and publication of agents.

Products

App InsightsDatadog found that from at least August 29, 2025 to September 25, 2025 Microsoft Copilot Studio did not log certain administrative actions involving sharing, authentication, App Insights, and publication of agents.Datadog Cloud SIEMFor customers that use Datadog Cloud SIEM, the following detections monitor for possible Copilot Studio agent tampering:Microsoft 365 Apps for EnterpriseFour specific Microsoft 365 Audit events were not being generated: BotUpdateOperation-BotAuthUpdate, BotUpdateOperation-BotAppInsightsUpdate, BotUpdateOperation-BotShare, and BotUpdateOperation-BotPublish.Microsoft Copilot StudioDatadog found that from at least August 29, 2025 to September 25, 2025 Microsoft Copilot Studio did not log certain administrative actions involving sharing, authentication, App Insights, and publication of agents.Microsoft PurviewWe then ran a search in Microsoft Purview to review generated logs.