Local AI Agent Inventory (Current State)
This rule extracts and audits inventory information from local agents, including vendor, device name, account context, and associated process information. It is designed to provide visibility into the state and configuration of installed local agents within the environment.
Microsoft Sentinel (KQL)
