Detecting AI Note-Taking Bots Admitted to Teams Meetings

This query identifies each instance of an AI note-taking bot waiting in the Teams meeting lobby and the user who admitted it from the lobby. Note: Update MeetingParticipantName has_any ("Fireflies", "Spice AI", "read.ai", "Cresco AI") to include additional AI bot names.

Microsoft Sentinel (KQL)