building-cloud-siem-with-sentinel

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The required workflow queries Microsoft Sentinel (Log Analytics) logs and security telemetry such as AWS CloudTrail, Azure AD sign-ins, and network traffic, which contain arbitrary user-submitted data and external telemetry ingested into a monitored queue/feed.