Microsoft Sentinel

Not connected

Stream AI security-posture events into your cloud-native SIEM & XDR.

Endpoint

Test connection

Enable

Point Atlas at your Log Analytics workspace and Data Collection Rule.

Log Analytics Workspace IDRegionData Collection Endpoint (DCE)DCR immutable ID

What Atlas will forward

Once connected, these AI-SPM signal streams map into dedicated Sentinel custom-log tables.

Choose which AI-SPM signals forward to Sentinel, and where they land.

Policy violationsPolicy Enforcement
Guardrail & DLP policy hits on AI prompts and outputs.
ATLAS_PolicyViolation_CL
PII exposurePII Shield
Sensitive data detected flowing into third-party AI tools.
ATLAS_PIIExposure_CL
SaaS / vendor AI riskSaaS Vendor AI
Third-party AI vendor risk-score & posture changes.
ATLAS_VendorRisk_CL
Shadow-AI discoveryAgent Discovery
Previously-unknown AI apps & agents observed on endpoints.
ATLAS_ShadowAI_CL
Model risk & eval failuresModel Risk
Red-team / eval regressions and model risk threshold breaches.
ATLAS_ModelRisk_CL