Systematic high-volume embedding/vector similarity queries by single principal
Detects potential embedding inversion or extraction attempts by identifying callers exhibiting abnormally high volumes of similarity or vector search queries against RAG-enabled vector stores or cognitive search APIs within a short timeframe.
Microsoft Sentinel (KQL)
