Cisco AI Defense Security Alerts by Application Name: endpointWeb ApplicationNoneversion:8
This analytic summarizes Cisco AI Defense events by application, connection, action, message direction, and severity over ten-minute intervals.
Allowed responses flagged for privacy guardrails are handled by the dedicated sensitive-response detection.
Allowed prompts flagged for privacy guardrails are handled by Cisco AI Defense Allowed Sensitive Prompt.
Repeated prompt injection, code detection, PII, or PCI events are handled by the repeated high-risk activity detection.
Cisco AI Defense Repeated High Risk Activity: endpointWeb ApplicationNoneversion:1
Detects bursts of five or more distinct Cisco AI Defense event IDs, or three or more occurrences of the same event ID, matching prompt injection, code detection, PII, or PCI guardrails for the same application and connection within ten minutes.
Allowed PII/PCI prompt events are handled by Cisco AI Defense Allowed Sensitive Prompt.
These patterns can indicate iterative prompt-injection probing or repeated attempts to use an AI application to access restricted data or capabilities.
Cisco AI Defense Allowed Sensitive Response: endpointWeb ApplicationNoneversion:1
Detects Cisco AI Defense response events that were allowed and matched a privacy guardrail for personally identifiable information or payment card data.
These events may indicate that sensitive information was returned to an AI application user and should be reviewed promptly.
Cisco AI Defense Allowed Sensitive Prompt: endpointWeb ApplicationNoneversion:1
Detects Cisco AI Defense prompt events that were allowed and matched a privacy guardrail for personally identifiable information or payment card data.
These events may indicate that sensitive information was submitted to an AI application and should be reviewed against the organization's data handling policy.
