You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: defender-for-cloud-apps/ai-agent-inventory.md
+15-23Lines changed: 15 additions & 23 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -1,5 +1,5 @@
1
1
---
2
-
title: Discover and detect threats on your AI agents (Preview)
2
+
title: Discover and detect threats using the AI agents inventory (Preview)
3
3
ms.author: abbyweisberg
4
4
author: AbbyMSFT
5
5
description: Learn how to view all of the AI Agents in your organization using Microsoft Defender.
@@ -12,19 +12,27 @@ ms.reviewer: gayasalomon
12
12
13
13
# Discover and protect your Copilot Studio custom AI Agents (Preview)
14
14
15
-
Microsoft Defender detects all Copilot Studio custom AI Agents in your tenant and identify misconfigured or potentially risky agents.
15
+
Microsoft Defender detects all Copilot Studio custom AI Agents in your tenant and provides tools to identify misconfigured or potentially risky agents.
16
16
17
-
When you enable detection of your AI agents, Microsoft Defender for Cloud Apps populates the [AIAgentsInfo table](/defender-xdr/advanced-hunting-aiagentsinfo-table) which can be used in [advanced hunting](/defender-xdr/advanced-hunting-overview).
17
+
When you give Microsoft Defender access to your custom agents, Microsoft Defender for Cloud Apps collects data from your Copilot Studio custom AI Agents for use in [advanced hunting](/defender-xdr/advanced-hunting-overview).
18
+
19
+
## Prerequisites
20
+
To enable AI agent inventory and detection you must opt-in to public preview features of:
21
+
- Microsoft Defender for Cloud Aps
22
+
- Microsoft Defender for Cloud
23
+
- Microsoft Defender XDR
24
+
25
+
For more information, see [Microsoft Defender preview features](https://security.microsoft.com/securitysettings/defender/preview_features).
18
26
19
27
## Enable AI agent detection for Microsoft Copilot Studio custom agents
20
28
21
29
> [!NOTE]
22
30
> The onboarding process for AI Agent protection requires collaboration with Power Platform administrators.
23
31
To enable AI agent detection for your Microsoft Copilot Studio agents, follow these steps:
24
32
25
-
1.**Sign in to the [Microsoft Defender portal](https://security.microsoft.com)**:
33
+
1.**Sign in to the [Microsoft Defender portal](https://security.microsoft.com)** as the System Administrator.
26
34
1. Go to **System > Settings > Cloud Apps > Copilot Studio AI Agents**.
27
-
1. Turn on **Copilot Studio AI Agents**. Enabling Copilot Studio AI Agents allows Microsoft Defender to start discovering AI agents in your environment.
35
+
1. Turn on **Copilot Studio AI Agents**. Enabling Copilot Studio AI Agents confirms that you have read the disclaimer and that agree to use the Microsoft Defender AI agent protection features.
28
36
29
37
:::image type="content" source="media/protect-ai-agents/copilot-studio-ai-agents-button.png" alt-text="Screenshot of the Copilot Studio AI Agent configuration toggle.":::
30
38
@@ -34,28 +42,12 @@ To enable AI agent detection for your Microsoft Copilot Studio agents, follow th
34
42
35
43
When Copilot Studio AI Agents are connected, a green indicator appears in the **AI Agents Inventory** section. It can take up to 30 minutes for the initial connection status to update. Depending on the size and complexity of your environment, it might take longer to see the full deployment of the AI agent inventory.
36
44
37
-
## Detect threats on your Microsoft Copilot Studio AI agents
38
-
39
-
Once you enable AI agent protection on your AI agents created using Copilot Studio, enable the Microsoft 365 App Connector to:
40
-
- Run detections on your AI Agents created using Copilot Studio
41
-
- Create alerts and incidents for suspicious activity
42
-
43
-
To enable threat detection and alerts, connect Microsoft Defender for Cloud Apps to Microsoft 365:
44
-
45
-
1. Complete the steps in Microsoft 365 to [Connect Defender for Cloud Apps with Microsoft 365](protect-office-365.md#connect-microsoft-365-to-microsoft-defender-for-cloud-apps).
46
-
1. When you complete the Microsoft 365 connector setup, sign in to the **[Microsoft Defender portal](https://security.microsoft.com)**, and go to **System > Settings > Cloud Apps > Copilot Studio AI Agents**.
47
-
1. In the **Microsoft 365 connector** section, select **Connect** or **Edit**.
48
-
1. Select **Microsoft Entra ID Management events** and **Microsoft 365 activities**.
49
-
1. Select **Connect Microsoft 365**.
50
-
51
-
When the Microsoft 365 connector is connected, a green **Connected** status appears in the **Microsoft 365 connector** section.
52
-
53
45
54
46
## Use Advanced Hunting on your AI agents
55
47
56
-
When the Microsoft 365 app connector is enabled, you can use advanced hunting to help identify misconfigured or risky agents and minimize organizational exposure to potential threats.
48
+
After you've given Microsoft Defender access to your custom agents, you can use advanced hunting to help identify misconfigured or risky agents and minimize organizational exposure to potential threats.
57
49
58
-
1. Sign in to the Defender portal, ang go to **Advanced hunting**.
50
+
1. Sign in to the Defender portal, and go to **Advanced hunting**.
59
51
1. In the **Apps & identities** section, the [AIAgentsInfo](/defender-xdr/advanced-hunting-aiagentsinfo-table) contains data for all your custom AI agents created using Copilot Studio. You can use this data to create custom queries.
60
52
1. In the **Queries** tab, see the **MCS AI Agents** section for pre-defined KQL queries to help identify misconfigured or risky agents.
Copy file name to clipboardExpand all lines: defender-for-cloud-apps/ai-agent-protection.md
+2-3Lines changed: 2 additions & 3 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -19,11 +19,10 @@ As no code/low code platforms become increasingly accessible, organizations face
19
19
20
20
Microsoft Defender addresses critical security gaps with comprehensive AI agent protection that includes proactive exposure, threat hunting, real time protection, and alerts. With AI agent protection, Microsoft Defender:
21
21
22
-
- Detects all of your custom AI agents created with Microsoft Copilot Studio, and integrates AI Agent data into advanced hunting for proactive threat detection. You can use this data to create custom queries and hunt for potential threats. See [Discover and protect your AI agents (Preview)](ai-agent-inventory.md) to learn how to set up AI agent detection.
23
-
-Continuously monitors your AI agents for suspicious activity, enabling detections and alerts on your custom AI agents created with Copilot Studio. See [Detect threats on your Microsoft Copilot Studio AI agents](ai-agent-inventory.md#detect-threats-on-your-microsoft-copilot-studio-ai-agents).
22
+
- Detects all of your custom AI agents created with Microsoft Copilot Studio, and integrates AI Agent data into advanced hunting for proactive threat detection. You can use this data to create custom queries and hunt for potential threats. See [Discover and protect your AI agents (Preview)](ai-agent-inventory.md) to learn how to set up and make use of the AI agent inventory.
23
+
-After you've given Microsoft Defender access to your custom agents and [enabled the Microsoft 365 app connector](protect-office-365.md#connect-microsoft-365-to-microsoft-defender-for-cloud-apps), Microsoft Defender continuously monitors and collects audit logs for your AI agents for suspicious activity, enabling detections and alerts on your custom AI agents created with Copilot Studio.
24
24
- Provides real-time protection to block suspicious or harmful actions initiated by your AI agents. See [Enable real-time protection for Microsoft Copilot Studio Agents](/defender-for-cloud-apps/ai-agent-real-time-protection) to learn how to set up real-time protection.
25
25
26
-
27
26
## Related articles
28
27
29
28
-[Discover and protect your Copilot Studio custom AI Agents (Preview)](ai-agent-inventory.md)
0 commit comments