Microsoft Defender XDR
GeneralAi Agent Real Time Protection
In brief
The documentation now states that block events from Microsoft Prompt Shields for Foundry, Copilot Studio, and Copilot Agent Builder are recorded as behaviors.
What Defender admins need to know
Administrators can expect Prompt Shields block events from Copilot Studio agents to appear as recorded behaviors; no configuration change is required.
Summaries are generated from the documentation change itself.
Documentation change
View on Microsoft LearnThe comparison below shows only the changed extract. Use the full-page view for complete context.
Note
Block events from Microsoft Prompt Shields for FoundryFoundry, Copilot Studio and Microsoft Copilot Agent Builder are also recorded as behaviors. This isn't yet supported for agents built with Microsoft Copilot Studio.
Supported threat scenarios for real-time protection
@@ -74,7 +74,7 @@ When Microsoft Defender audits or blocks an action, it records the event as a be
Note
-Block events from Microsoft Prompt Shields for Foundry and Microsoft Copilot Agent Builder are also recorded as behaviors. This isn't yet supported for agents built with Microsoft Copilot Studio.
+Block events from Microsoft Prompt Shields for Foundry, Copilot Studio and Microsoft Copilot Agent Builder are also recorded as behaviors.
## Supported threat scenarios for real-time protection