cynicalsecurity 
Current status: running an empty query for six months of Azure logs to download all of them onto my Unix machine to use civilised tools to find out what happened.
Benno 
@cynicalsecurity you are assuming that the answer is actually in there.
have you considered that the journey might be the answer?
have you considered that the journey might be the answer?
@benno I am inching towards “the license is the answer”…