> A security audit should have caught this issue Is there a culture of "security" at MS? No, and there never has been. "threat intel" is the group of people

> A security audit should have caught this issue Is there a culture of "security" at MS? No, and there never has been. "threat intel" is the group of people ideintyfing foxes, BY BEHAVIOR. They don't get their data out of thin air, it comes from threat detection and incedntd responses. Your making the argument that MS is structured like a TV police department, sure, but the intel team is like the fbi/cia... they have a much larger perview and scope and have to because of their work. Missing these sorts of thing in your own back yard isn't a statement of confidence.