Devices Running Multiple Local AI Agents

Identifies devices running more than three local AI agents and lists the agents detected on each device, helping uncover systems with a high concentration of AI agent activity.

Microsoft Sentinel (KQL)