Microsoft Defender + Copilot Studio AI agents
Full tenant inventory, risk signal, and runtime protection (Preview), a practical enablement guide. If you’ve been waiting for central visibility and security controls over the custom AI agents your makers are spinning up in Copilot Studio, Microsoft Defender now has a clear story: it can detect all Copilot Studio custom AI agents in your tenant, collect their data for hunting, and (optionally) provide real-time protection during runtime to block suspicious tool invocations before an agent can act. This post walks through the exact enablement steps across the Microsoft Defender portal and the Power Platform admin center (PPAC), and explains what data is collected , what gets blocked , and how to validate it’s working . Everything below is based only on Microsoft documentation What you get (and why it matters) 1) AI agent inventory + risk identification (Defender) Once enabled, Microsoft Defender detects all Copilot Studio custom AI agents in your tenant and collects data from Copilot S...