A subject uses native meeting platform capabilities or third-party recording and transcription services to capture organizational meetings in preparation for a subsequent infringement. This may involve initiating built-in audio or video recording, enabling automated transcription, or introducing an external meeting bot or AI-powered assistant to record, transcribe, or summarize discussions.

These activities may capture sensitive organizational information, including confidential business discussions, intellectual property, strategic decisions, or other information disclosed verbally or through shared meeting content. Recordings, transcripts, and generated summaries may be retained within the meeting platform, associated cloud storage, or external third-party services, making the information available for subsequent unauthorized access, retrieval, or exfiltration.

The subject may exploit legitimately available recording features or introduce third-party services outside approved organizational processes. The use of these capabilities becomes relevant to an insider threat investigation where the capture or retention of meeting content is unauthorized or associated with preparation for a subsequent infringement.

Subsections (2)

ID	Name	Description
PR057.002	Recording and Transcription via Meeting Bots	A subject introduces or authorizes a third-party meeting bot or AI-powered recording assistant to join an organizational meeting and capture spoken communications, shared content, or other sensitive information in preparation for a subsequent infringement. These services may join meetings as identifiable participants and independently record, transcribe, or summarize discussions. The subject may use services such as Otter.ai, Fireflies.ai, or similar meeting assistants to capture information outside the native recording capabilities of the meeting platform. Recordings, transcripts, and AI-generated summaries may be processed or retained within external services, potentially placing sensitive organizational information outside approved storage and security controls. The defining characteristic is the introduction of an additional automated meeting participant that captures meeting content independently of the platform's native recording and transcription functionality.
PR057.001	Recording and Transcription via Native Features	A subject uses built-in recording or transcription capabilities within organizational meeting platforms, such as Microsoft Teams, Zoom, or Google Meet, to capture sensitive discussions, information, or decisions in preparation for a subsequent infringement. This may involve initiating audio or video recordings, enabling automated transcription, or using native AI-powered meeting assistants to generate transcripts and summaries. These capabilities may produce recordings, searchable transcripts, or meeting summaries containing confidential business discussions, intellectual property, or other sensitive organizational information. The resulting artifacts may be retained within the meeting platform or associated cloud storage services, allowing the subject to subsequently access, download, or transfer the captured information. The defining characteristic is the use of functionality provided directly by the meeting platform, rather than an independent recording service or external meeting participant.

Preparation

Meeting Recording and Transcription

Subsections (2)

Detections (1)