LLM Jailbreak Attempt Against Internal GenAI Application
This rule detects potential prompt injection and jailbreak attempts targeting internal Generative AI applications by monitoring prompt content for known adversarial patterns (e.g., DAN roleplay, hypothetical bypasses, and explicit disregard for safety instructions). The rule tracks repeat offenders or successful bypass attempts (where the application did not block the request).
Microsoft Sentinel (KQL)
