The Link That Was Public for Nine Days

Illustrative forensic story: cloud sharing

9/26/20261 min read

a man wearing a mask
a man wearing a mask

A project folder was meant for a small group of collaborators. A routine permissions review found that anyone with the link could open it.

The team removed public access, preserved the sharing settings and examined the available access records. They needed to answer three different questions: which files were exposed, how long the link had been open, and what the logs could show about access.

A request in an access log was useful evidence, but it was not automatically a person reading a document. Preview services and automated checks can also generate requests. Equally, limited logging could not prove that nobody had opened the folder.

The final report separated confirmed events from possibilities. It identified the exposure window and the records available to assess it, while stating where visibility ended. That gave the organisation a firmer basis for deciding whom to notify and what permissions to review next.

Contact

Reach out for tailored forensic solutions.

Email

Phone

admin@papertrailanalytics.com

+61-497296095

© 2025. All rights reserved.