Microsoft Copilot Jailbreak Detected

Benjamin Zulliger@benscha

•updated Feb 26, 2026•24•1•157

This rule detects instances where a 'jailbreak' attempt is identified within a Microsoft Copilot interaction. It specifically looks for CopilotInteraction events where the 'JailbreakDetected' flag is set to true in the message data.