A human rights organization was alerted by Microsoft that it was compromised as part of a July email breach attributed to Storm-0558, but the organization couldn’t find any evidence of compromise in their logs. Why? It didn’t pay Microsoft a premium for an E5-level license.
That’s the story Steven Adair with Volexity took to Twitter to tell, highlighting the lack of access to logging for the vast majority of Microsoft customers who don’t have E3 licenses.