Skip to content

Add Vaikora AI Agent Behavioral Signals — Microsoft Sentinel Solution v1.0.0#13983

Open
mazamizo21 wants to merge 36 commits intoAzure:masterfrom
mazamizo21:feature/vaikora-sentinel-v1.0.0
Open

Add Vaikora AI Agent Behavioral Signals — Microsoft Sentinel Solution v1.0.0#13983
mazamizo21 wants to merge 36 commits intoAzure:masterfrom
mazamizo21:feature/vaikora-sentinel-v1.0.0

Conversation

@mazamizo21
Copy link
Copy Markdown
Contributor

Vaikora AI Agent Behavioral Signals — Microsoft Sentinel Solution v1.0.0

This PR adds a new Microsoft Sentinel solution that ingests AI agent behavioral signals from the Vaikora platform using the Codeless Connector Framework (CCF).

What's included

Data Connector (CCF RestApiPoller)

  • Polls Vaikora REST API (GET /api/v1/actions) every 6 hours
  • Custom table: Vaikora_AgentSignals_CL
  • Captures: action type, agent ID, policy decision, risk score (0-100), anomaly score, threat detection status, log hash

3 Analytic Rules

  • High Risk AI Agent Action (risk_score >= 75, severity high/critical)
  • Behavioral Anomaly Detected (is_anomaly = true, anomaly_score >= 0.7)
  • Agent Policy Violation (policy_decision = block)

Workbook

  • VaikoraAgentSignalsDashboard — visualizes agent signal trends, risk distributions, and policy decision summaries

Package

  • mainTemplate.json + createUiDefinition.json + 1.0.0.zip

What is Vaikora?

Vaikora is an AI agent governance platform that monitors, evaluates, and enforces policies on AI agent actions in real time. It provides behavioral profiling, anomaly detection, policy enforcement, and human-in-the-loop approval workflows for AI agent systems.

This connector bridges the gap between AI agent governance and SIEM — enabling security teams to detect AI agents behaving outside safe operational parameters, attempting unauthorized resource access, or triggering policy blocks.

Publisher

Data443 Risk Mitigation, Inc. — support@data443.com

@mazamizo21 mazamizo21 requested review from a team as code owners April 3, 2026 06:53
@v-shukore v-shukore added the New Solution For new Solutions which are new to Microsoft Sentinel label Apr 3, 2026
@v-maheshbh
Copy link
Copy Markdown
Contributor

Hi @mazamizo21

Kindly package the solution with version 3.0.0.

Thanks!

@mazamizo21 mazamizo21 force-pushed the feature/vaikora-sentinel-v1.0.0 branch from e21e106 to f3ea143 Compare April 3, 2026 14:59
@mazamizo21
Copy link
Copy Markdown
Contributor Author

Hi @v-maheshbh — done! Repackaged all 4 Vaikora solutions with version 3.0.0. Package/3.0.0.zip is now in each branch. Thanks!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

New Solution For new Solutions which are new to Microsoft Sentinel

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants