Defender for Cloud Apps Generative AI Category

Question

Defender for Cloud Apps Generative AI Category

Richard Long 341

We're running Defender for Cloud Apps in our organization and we've detected over 100 applications in use, however, no Generative AI app usage has been detected on any of our endpoints despite it definitely being used. I've even used ChatGPT and Google Gemini on my device to try to help along the discovery, but it hasn't worked. Has anyone else had similar issues having applications detected? Are there any tips for ensuring more reliable discovery? If we decide to unsanction the usage of any apps, I'd like to be confident that Defender for Cloud Apps will be able to accurately block the unsanctioned apps.

For what it's worth, we've enrolled our endpoints into Defender for Endpoint and it's running in passive mode as we're using a 3rd party AV solution.

Thanks

K-Mohammed 240 Reputation points Microsoft Employee

2024-07-04T11:31:00.8066667+00:00

Hi Richard,

Thanks for the question! I believe it should show the apps under discovery if certain conditions are met. Could you validate if Defender for Endpoint integration is setup correctly, and you have the policy created as mentioned in this blog post: https://techcommunity.microsoft.com/t5/microsoft-defender-xdr-blog/discover-monitor-and-protect-the-use-of-generative-ai-apps/ba-p/3999228

Additionally, kindly validate if the apps are discovered correctly if Defender for Endpoint runs in Active mode?