Chapter 4 of 6
Decisions and stop conditions#
Defender for Cloud AI plan#
Decide whether to enable suspicious prompt evidence and Purview sharing. Prompt evidence helps triage alerts, but it can include redacted snippets of suspicious prompts or responses. Purview sharing requires the right Purview capability and does not cover Foundry agents through this Defender setting.
Stop if the privacy decision is missing, if the target subscription is wrong, if the plan is being enabled in an unsupported cloud, or if the owner treats Purview sharing as Foundry agent DLP.
Sentinel detections#
Deploy the Copilot jailbreak analytics rule only to the approved Sentinel workspace. The Microsoft Copilot connector must produce CopilotActivity. Defender for Cloud alerts need the Defender for Cloud connector or Defender XDR route before defender-ai-alerts.kql returns AI alert rows.
Stop if the workspace is not the approved workspace, if the connector path is not accepted by the SOC owner, or if the analytics rule would create incidents in a queue nobody owns.
Shadow AI decisions#
Use Defender for Cloud Apps Cloud Discovery. Filter Category = Generative AI, review risk, record the decision, and start with enforcementMode set to monitor. Apply Unsanctioned tags in the portal only after the owner accepts the recorded app list.
Stop if the app list is an export from an unmanaged source, if an app is blocked without a restore reference, or if business-critical apps are moved straight to block mode.