Reconstructing AI activity in investigationsĀ | Microsoft Security Blog
Reconstructing AI activity in investigations is achieved by using a new investigator playbook that leverages telemetry from Microsoft 365 Copilot and Azure AI services. This structured approach helps security teams analyze AI-related activity to determine if interactions represent normal usage or security threats.