AI threat findings

Security Command Center analyzes various logs for potential threats that affect AI services. The following log-based detections are available with Event Threat Detection:

Initial Access: Dormant Service Account Activity in AI Service

Persistence: New AI API Method

Persistence: New Geography for AI Service

Privilege Escalation: Anomalous Impersonation of Service Account for AI Admin Activity

Privilege Escalation: Anomalous Multistep Service Account Delegation for AI Admin Activity

Privilege Escalation: Anomalous Multistep Service Account Delegation for AI Data Access

Privilege Escalation: Anomalous Service Account Impersonator for AI Admin Activity

Privilege Escalation: Anomalous Service Account Impersonator for AI Data Access

What's next

• Learn about Event Threat Detection.
• Refer to the Threat findings index.