Microsoft 365 Entra ID
What Did the Backup App Read? The Log That Could Tell You Had to Be On Already
After the ConnectWise Cloud Backup (SkyKick) credential was used against Microsoft 365 tenants, every affected organisation gets the same question: what did it read? Mail reads are usually audited. Directory reads are not, unless Microsoft Graph activity logs were on before the incident.
