AI 威胁发现结果

Security Command Center 会分析各种日志,以发现影响 AI 服务的潜在威胁。Event Threat Detection 支持以下基于日志的检测:

  • Initial Access: Dormant Service Account Activity in AI Service
  • Persistence: New AI API Method
  • Persistence: New Geography for AI Service
  • Privilege Escalation: Anomalous Impersonation of Service Account for AI Admin Activity
  • Privilege Escalation: Anomalous Multistep Service Account Delegation for AI Admin Activity
  • Privilege Escalation: Anomalous Multistep Service Account Delegation for AI Data Access
  • Privilege Escalation: Anomalous Service Account Impersonator for AI Admin Activity
  • Privilege Escalation: Anomalous Service Account Impersonator for AI Data Access
  • 后续步骤