Malicious Code-Gen Prompts & Anomalous Usage on Internal LLM Endpoints
This rule detects potentially malicious interactions with Azure OpenAI deployments, specifically looking for prompts indicative of malware-authoring, safety filter bypass attempts, and abnormal volumes of requests from a single identity.
Microsoft Sentinel (KQL)
