PathixDataverse Forensics

← All 40 findings

Auditability & observability

A plugin that catches exceptions and hides the failure

Severity High / Medium / Low

What it is

Component catches exceptions without logging or rethrowing.

Why it matters

A plugin catch block that neither logs nor rethrows makes failures vanish with no trace. Read deterministically from the compiled IL; severity rises when the component writes a sensitive field.

Find it yourself

Only findable if you have the source. Search it for catch blocks whose body neither rethrows nor writes a trace line. Without source you cannot check this by hand at all, and the symptom is a process that appears to work while silently doing nothing.

How to fix it

Rethrow or trace the error before continuing; if swallowing is intended, say so in a trace line.

Related controls

SOC 2 CC7.2ISO 27001 A.8.15NIST AU-2 / SI-11

These mappings are indicative. Pathix detects a condition relevant to a control. It does not certify your compliance, and a finding is not an audit opinion. You stay responsible for your control environment.

Pathix checks this across every environment you scan, along with 39 other conditions. Self-hosted in your own Azure, read-only, metadata-only.

More in auditability & observability

← Back to all 40 findings

Pathix

Forensics for Dynamics 365 and the Dataverse.

See it on sample data →
USE CASES
CAPABILITIES
  • What we check
  • Dataverse MCPsoon
  • Dependency analysissoon
  • Migration impactsoon
PRODUCT
COMPANY
© 2026 Pathix · self-hosted · metadata-onlyNot affiliated with Microsoft. Dynamics 365, Dataverse, and Power Platform are trademarks of Microsoft Corporation.