↳ GitHub sourceAnalytics ruleHigh

AIShield - Image classification AI Model Evasion low suspicious vulnerability detection

Description

'This alert creates an incident when Image classification AI Model Evasion low suspicious, high severity vulnerability detected from the AIShield.'

Rule type: Scheduled
Version: 1.0.4
Declared status: Available
Query frequency: 1h
Query period: 1h
Trigger: gt 0

Declared sources

Metadata from the source file. No dependencies inferred from KQL.

Connectors

BoschAIShield

Data types

AIShield

KQL query

Original query, unchanged.

AIShield
| where Message has 'Image Classification AI Model Evasion Attack Identified'
| where Severity =~ 'Medium'
| where SuspiciousLevel =~ 'low suspicious attack'
| extend NTDomain = tostring(split(Computer, '\\')[0]), HostName = tostring(split(Computer, '.')[0])

Declared entities

HostIP

Source provenance

GitHub

Displayed values come from files in Azure/Azure-Sentinel. They describe the published template, not your workspace configuration.

File: Solutions/AIShield AI Security Monitoring/Analytic Rules/ImageClassficationModelEvasionLowSuspiciousVulnDetection.yaml ↗
Commit: 7ca9800 ↗
Source identifier: c4bedb3c-4fb8-4b1c-af5b-8229bd25f521

Additional source files 2

Solutions/AIShield AI Security Monitoring/Analytic Rules/ImageClassficationModelEvasionLowSuspiciousVulnDetection.yamlsource ↗Solutions/AIShield AI Security Monitoring/Data/Solution_AIShield.jsonsolution-membership ↗

GSTEP / CATALOG TRACKING

Added to catalog : 16 Sept 2026 · 05:49 UTC
Last change observed : 16 Sept 2026 · 05:49 UTC

GSTEP sync dates, separate from the source content’s publication dates.