AI Security (AI Detection & Response) incident fields

The following fields are shown on the incident Properties tab for the DLP Cloud API channel. Fields common to all incidents, such as severity, status, and incident time, are not repeated here.

Table 1. Incident fields for the DLP Cloud API channel
Field Value
Action The action that should take place in case of a breach (the expected action, and not the actual action that took place).
Channel DLP Cloud API.
Operation AI Prompt or AI Response or one of the file operations available for DLP Cloud API channel.
Analyzed by Data Protection Service
Detected by AI Security App Connector
Source The email address of the user who submitted the prompt.
Destination The cloud application name and the cloud application type.
Attachments Forensics details captured.