Threat detection for Microsoft Agent 365 agents

Threat detection for Microsoft Agent 365 agents: Microsoft Defender analyzes runtime signals from agent interactions, tool usage, and execution patterns to surface alerts in Microsoft Defender XDR. Detection uses observability data from Microsoft Copilot Studio, Microsoft Foundry, Microsoft 365 Copilot Agent Builder, and agents integrated through the Microsoft Agent 365 SDK. Analysts can investigate alerts through incidents and advanced hunting. For more information, see Detect and investigate threats to AI agents using Microsoft Defender.

Affected: Microsoft Defender XDR, Advanced Hunting

Related changes

• The Microsoft Security Copilot Threat Intelligence Briefing Agent in… · Threat
• Local AI agent discovery on Windows endpoints · Agent
• You can now enrich your custom detection rules by creating dynamic alert… · Detection
• You can now view all your user-defined rules—both custom detection rules and… · Detection
• AI agent posture risk in Microsoft Defender · Agent
• Real-time protection for Microsoft Agent 365 tooling servers · Agent

Change history

View at Microsoft → Copy summary