Is there a limit to what audit detection can do?

Short answer

Yes: it cannot catch a well-behaved insider reading within quota. The design states this limit plainly.

This is designed, not built.

Related answers

• Does the audit detect snooping on neighbors or VIPs? Designed
• Can auditors look without changing things? Designed

See it in context: Audit and tamper evidence · Search the help center · Ask a question